我的电脑不知道看什么网站后主页被篡改了，被篡改后的地址成http://www.sl400.cn/?tg=2008001，可是这个网站得名字却叫ok.2345网址大全。用了木马，OK2345专杀都杀不掉。查了网站试了其他方法也没有用~~，主页怎么也改不过来，什么超级巡警，黄山，360等软件都不起作用，太流氓了啊，按照网友的步骤修改注册表也不行，只要重启就又是那个流氓网站，主页就是改不过来啊！

救命啊,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,救命啊！各位大哥，大姐帮帮忙啊！那个网址太流氓了啊！欺负人啊！很长时间了啊，就没有解决办法吗？



各位大哥大姐，知道办法的给帮帮忙啊！麻烦各位给看看啊！
  我用的也是正版瑞星，可是就是杀不出毒来啊！
用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

用卡卡“高级工具”-“系统修复”看看~
真不行就打分日志上来看看

瑞星卡卡电脑诊断日志 v1.30 (2008-9-9 10:46:10)  北京瑞星信息技术有限公司

注释:    [A]表示该文件存在自启动关联;
    [M]表示该文件在内存中;

+ 注册表自运行项目
  + 系统服务
    + HKLM\System\CurrentControlSet\Services
      AddFiltr
        [A ] 1. c:\program files\hewlett-packard\hp quick launch buttons\addfiltr.exe


      gusvc
        [A ] 2. c:\program files\google\common\google updater\googleupdaterservice.exe


      hpqwmiex
        [AM] 3. c:\program files\hewlett-packard\shared\hpqwmiex.exe


      MDM
        [AM] 4. c:\program files\common files\microsoft shared\vs7debug\mdm.exe


      ose
        [A ] 5. c:\program files\common files\microsoft shared\source engine\ose.exe


      RsCCenter
        [AM] 6. d:\program files\rising\rav\ccenter.exe


      RsRavMon
        [AM] 7. d:\program files\rising\rav\ravmond.exe


      XAudioService
        [A ] 8. c:\windows\system32\drivers\xaudio.exe




  + 内核驱动
    + HKLM\System\CurrentControlSet\Services
      Alidevice
        [A ] 9. c:\windows\system32\drivers\alidevice.sys


      BCM43XX
        [A ] 10. c:\windows\system32\drivers\bcmwl5.sys


      eabfiltr
        [A ] 11. c:\windows\system32\drivers\eabfiltr.sys


      eabusb
        [A ] 12. c:\windows\system32\drivers\eabusb.sys


      HBtnKey
        [A ] 13. c:\windows\system32\drivers\cpqbttn.sys


      HdAudAddService
        [A ] 14. c:\windows\system32\drivers\chdaud.sys


      HDAudBus
        [A ] 15. c:\windows\system32\drivers\hdaudbus.sys


      HookCont
        [A ] 16. c:\windows\system32\drivers\hookcont.sys


      HookNtos
        [A ] 17. c:\windows\system32\drivers\hookntos.sys


      HookReg
        [A ] 18. c:\windows\system32\drivers\hookreg.sys


      HookSys
        [A ] 19. c:\windows\system32\drivers\hooksys.sys


      HSF_DPV
        [A ] 20. c:\windows\system32\drivers\hsx_dpv.sys


      HSXHWAZL
        [A ] 21. c:\windows\system32\drivers\hsxhwazl.sys


      ialm
        [A ] 22. c:\windows\system32\drivers\igxpmp32.sys


      mdmxsdk
        [A ] 23. c:\windows\system32\drivers\mdmxsdk.sys


      RsNTGDI
        [A ] 24. c:\windows\system32\drivers\rsntgdi.sys


      SafeBoxKrnl
        [A ] 25. c:\windows\system32\drivers\safeboxkrnl.sys


      Secdrv
        [A ] 26. c:\windows\system32\drivers\secdrv.sys


      TesSafe
        [A ] 27. c:\windows\system32\tessafe.sys


      UIUSys
        [A ] 28. c:\windows\system32\drivers\uiusys.sys


      winachsf
        [A ] 29. c:\windows\system32\drivers\hsx_cnxt.sys


      XAudio
        [A ] 30. c:\windows\system32\drivers\xaudio.sys


      zinem
        [A ] 31. c:\windows\system32\drivers\zinem.sys


      ZSMC211
        [A ] 32. c:\windows\system32\drivers\zs211.sys




  + 系统登陆自运行
    + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
      igfxcui
        [A ] 33. c:\windows\system32\igfxdev.dll




  + IE浏览器加载模块
    + HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar
      {B057BF9C-55B4-4AA4-938A-FE78617866B8}
        [A ] 34. c:\program files\sucop\secplugin\secplugin.dll


      {2318C2B1-4965-11d4-9B18-009027A5CD4F}
        [A ] 35. c:\program files\google\googletoolbar2.dll



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
      {01443AEC-0FD1-40fd-9C87-E93D1494C233}
        [AM] 36. d:\program files\thunder network\thunder\comdlls\tdatonce_now.dll


      {889D2FEB-5411-4565-8998-1DD2C5261283}
        [AM] 37. d:\program files\thunder network\thunder\comdlls\xunleibho_now.dll



    + HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions
      Exec
        [A ] 38. d:\program files\thunder network\thunder\thunder.exe




  + 资源管理器加载模块
    + HKLM\SOFTWARE\Classes\PROTOCOLS\Filter
      text/xml
        [AM] 39. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll



    + HKLM\SOFTWARE\Classes\PROTOCOLS\Handler
      ms-itss
        [A ] 40. c:\program files\common files\microsoft shared\information retrieval\msitss.dll


      mso-offdap
        [A ] 41. c:\program files\common files\microsoft shared\web components\10\owc10.dll


      mso-offdap11
        [A ] 42. c:\program files\common files\microsoft shared\web components\11\owc11.dll



    + HKLM\SOFTWARE\Classes\Folder\shellex\ColumnHandlers
      {7D4D6379-F301-4311-BEBA-E26EB0561882}
        [AM] 43. c:\program files\common files\ahead\lib\nerodigitalext.dll



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
      HyperTerminal Icon Ext
        [A ] 44. c:\windows\system32\hticons.dll


      RISING
        [A ] 45. c:\windows\system32\ravext.dll


      WinRAR shell extension
        [A ] 46. d:\program files\winrar\rarext.dll


      NeroDigitalIconHandler
        [AM] 43. c:\program files\common files\ahead\lib\nerodigitalext.dll


      NeroDigitalPropSheetHandler
        [AM] 43. c:\program files\common files\ahead\lib\nerodigitalext.dll


      Microsoft Office HTML Icon Handler
        [AM] 47. d:\program files\microsoft office\office11\msohev.dll


      Web Folders
        [A ] 48. c:\program files\common files\microsoft shared\web folders\msonsext.dll




  + 用户登陆自运行项目
    + HKLM\Software\Microsoft\Windows\CurrentVersion\Run
      RavTask
        [AM] 49. d:\program files\rising\rav\ravtask.exe


      runeip
        [AM] 50. d:\program files\rising\antispyware\rstray.exe


      360Safebox
        [A ] 51. c:\program files\360safebox\safeboxtray.exe




  + 开机执行
    + HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
      BootExecute
        [A ] 52. c:\windows\system32\bsmain.exe




  + 映像劫持
    + HKCR\.html
      htmlfile\Edit\Command
        [A ] 53. d:\program files\microsoft office\office11\msohtmed.exe



    + HKCR\.htm
      htmlfile\Edit\Command
        [A ] 53. d:\program files\microsoft office\office11\msohtmed.exe



    + HKCR\.mp3
      NeroShowTime.Files7.mp3\play\Command
        [A ] 54. c:\program files\nero\nero 7\nero showtime\showtime.exe




  + 程序初始化和已知动态连接库
    + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
      AppInit_DLLs
        [AM] 55. c:\windows\system32\kmon.dll




  + 打印机监控
    + HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors
      Microsoft Document Imaging Writer Monitor
        [AM] 56. c:\windows\system32\mdimon.dll





+ 其他自启动项目
  + C:\WINDOWS\Tasks
    AppleSoftwareUpdate.job
      [A ] 57. c:\program files\apple software update\softwareupdate.exe




+ 正在运行的进程
  + 000000bc(188) hpqwmiex.exe
    00400000[00023000]
      [AM] 3. c:\program files\hewlett-packard\shared\hpqwmiex.exe


    60000000[00074000]
      [AM] 55. c:\windows\system32\kmon.dll



  + 00000130(304) rstray.exe
    00400000[00023000]
      [AM] 50. d:\program files\rising\antispyware\rstray.exe


    60000000[00074000]
      [AM] 55. c:\windows\system32\kmon.dll


    10000000[0003C000]
      [ M] 58. d:\program files\rising\antispyware\rsmginfo.dll


    23800000[00022000]
      [ M] 59. d:\program files\rising\antispyware\rsxml.dll


    7C3A0000[0007B000]
      [ M] 60. d:\program files\rising\antispyware\msvcp71.dll


    7C340000[00056000]
      [ M] 61. d:\program files\rising\antispyware\msvcr71.dll


    00C20000[00138000]
      [ M] 62. c:\windows\system32\sogoupy.ime


    02150000[00042000]
      [ M] 63. d:\program files\sogouinput\plugin\sgimeword.dll


    022C0000[00024000]
      [ M] 64. d:\program files\rising\antispyware\comserv.dll


    022F0000[00019000]
      [ M] 65. d:\program files\rising\antispyware\syslay.dll


    23700000[00026000]
      [ M] 66. d:\program files\rising\antispyware\rscommon.dll


    02330000[0002E000]
      [ M] 67. d:\program files\rising\antispyware\comx3.dll


    23900000[00040000]
      [ M] 68. d:\program files\rising\antispyware\pngdll.dll


    02AD0000[0005C000]
      [ M] 69. d:\program files\rising\antispyware\runiep.dll


    02B40000[0001F000]
      [ M] 70. d:\program files\rising\rav\proccom.dll


    02B60000[00024000]
      [ M] 71. d:\program files\rising\rav\rscommx2.dll



  + 0000019c(412) ctfmon.exe
    60000000[00074000]
      [AM] 55. c:\windows\system32\kmon.dll


    10000000[00138000]
      [ M] 62. c:\windows\system32\sogoupy.ime


    01E20000[00042000]
      [ M] 63. d:\program files\sogouinput\plugin\sgimeword.dll



  + 00000270(624) smss.exe

  + 000002b8(696) csrss.exe

  + 000002d0(720) winlogon.exe
    10000000[00138000]
      [ M] 62. c:\windows\system32\sogoupy.ime


    72C80000[00008000]
      [ M] 72. c:\windows\system32\msacm32.drv



  + 000002fc(764) services.exe

  + 00000308(776) lsass.exe

  + 00000398(920) svchost.exe

  + 000003c0(960) knownsvr.exe
    00400000[00072000]
      [ M] 73. d:\program files\rising\antispyware\knownsvr.exe


    10000000[0002F000]
      [ M] 74. d:\program files\rising\antispyware\ncomm.dll


    60000000[00074000]
      [AM] 55. c:\windows\system32\kmon.dll


    00A90000[0002E000]
      [ M] 67. d:\program files\rising\antispyware\comx3.dll


    00AC0000[00019000]
      [ M] 65. d:\program files\rising\antispyware\syslay.dll



  + 000003e8(1000) svchost.exe

  + 00000414(1044) CCenter.exe
    00400000[0002A000]
      [AM] 6. d:\program files\rising\rav\ccenter.exe



  + 00000424(1060) svchost.exe

  + 0000044c(1100) svchost.exe

  + 000004b4(1204) conime.exe
    60000000[00074000]
      [AM] 55. c:\windows\system32\kmon.dll


    10000000[0002E000]
      [ M] 67. d:\program files\rising\antispyware\comx3.dll


    00A00000[00019000]
      [ M] 65. d:\program files\rising\antispyware\syslay.dll


    00B50000[00138000]
      [ M] 62. c:\windows\system32\sogoupy.ime


    00F80000[00042000]
      [ M] 63. d:\program files\sogouinput\plugin\sgimeword.dll



  + 000004d0(1232) svchost.exe

  + 00000544(1348) RavTask.exe
    00400000[00034000]
      [AM] 49. d:\program files\rising\rav\ravtask.exe


    60000000[00074000]
      [AM] 55. c:\windows\system32\kmon.dll


    10000000[0001F000]
      [ M] 70. d:\program files\rising\rav\proccom.dll


    00A50000[00024000]
      [ M] 71. d:\program files\rising\rav\rscommx2.dll


    23700000[00028000]
      [ M] 75. d:\program files\rising\rav\rscommon.dll


    00AB0000[0000E000]
      [ M] 76. d:\program files\rising\rav\rsappmgr.dll


    08CF0000[00030000]
      [ M] 77. d:\program files\rising\rav\cfgdll.dll


    08F00000[00138000]
      [ M] 62. c:\windows\system32\sogoupy.ime


    0A430000[00042000]
      [ M] 63. d:\program files\sogouinput\plugin\sgimeword.dll



  + 00000564(1380) Explorer.EXE
    60000000[00074000]
      [AM] 55. c:\windows\system32\kmon.dll


    10000000[00138000]
      [ M] 62. c:\windows\system32\sogoupy.ime


    00DD0000[00042000]
      [ M] 63. d:\program files\sogouinput\plugin\sgimeword.dll


    72C80000[00008000]
      [ M] 72. c:\windows\system32\msacm32.drv


    03FB0000[001B9000]
      [AM] 43. c:\program files\common files\ahead\lib\nerodigitalext.dll


    7C140000[00103000]
      [ M] 78. c:\program files\common files\ahead\lib\mfc71.dll


    7C340000[00056000]
      [ M] 79. c:\program files\common files\ahead\lib\msvcr71.dll


    7C3A0000[0007B000]
      [ M] 80. c:\program files\common files\ahead\lib\msvcp71.dll


    02F50000[0002A000]
      [ M] 81. c:\windows\system32\igfxpph.dll


    026C0000[00015000]
      [ M] 82. c:\windows\system32\hccutils.dll


    02E60000[00018000]
      [ M] 83. c:\windows\system32\igfxres.dll


    04270000[00320000]
      [ M] 84. c:\windows\system32\igfxress.dll


    02F80000[0000F000]
      [ M] 85. c:\windows\system32\igfxsrvc.dll


    046A0000[0000E000]
      [ M] 86. d:\program files\sina\uc\ucidlehook.dll


    05070000[0002C000]
      [AM] 36. d:\program files\thunder network\thunder\comdlls\tdatonce_now.dll


    05390000[00031000]
      [AM] 37. d:\program files\thunder network\thunder\comdlls\xunleibho_now.dll


    240A0000[0000E000]
      [ M] 87. d:\program files\thunder network\thunder\components\resworker\dsbho_01.dll


    24050000[0001E000]
      [ M] 88. d:\program files\thunder network\thunder\components\resworker\dataprocessor_01.dll



  + 0000057c(1404) ravmond.exe
    00400000[00069000]
      [AM] 7. d:\program files\rising\rav\ravmond.exe


    10000000[00042000]
      [ M] 89. d:\program files\rising\rav\bwlist.dll


    7C140000[00103000]
      [ M] 90. c:\windows\system32\mfc71.dll


    7C340000[00056000]
      [ M] 91. c:\windows\system32\msvcr71.dll


    7C3A0000[0007B000]
      [ M] 92. c:\windows\system32\msvcp71.dll


    00B20000[0000E000]
      [ M] 76. d:\program files\rising\rav\rsappmgr.dll


    00B40000[00030000]
      [ M] 77. d:\program files\rising\rav\cfgdll.dll


    00DE0000[00067000]
      [ M] 93. d:\program files\rising\rav\rslog.dll


    00B80000[0001F000]
      [ M] 70. d:\program files\rising\rav\proccom.dll


    00E50000[00024000]
      [ M] 71. d:\program files\rising\rav\rscommx2.dll


    00E90000[00075000]
      [ M] 94. d:\program files\rising\rav\monrule.dll


    00F20000[00013000]
      [ M] 95. d:\program files\rising\rav\hooksys.dll


    00FE0000[00138000]
      [ M] 62. c:\windows\system32\sogoupy.ime


    01340000[00013000]
      [ M] 96. d:\program files\rising\rav\hookreg.dll


    013A0000[00013000]
      [ M] 97. d:\program files\rising\rav\hookntos.dll

01400000[0001D000]
      [ M] 98. d:\program files\rising\rav\rswalmon.dll


    02230000[00035000]
      [ M] 99. d:\program files\rising\rav\recomp.dll


    02280000[00036000]
      [ M] 100. d:\program files\rising\rav\refs.dll


    022D0000[00023000]
      [ M] 101. d:\program files\rising\rav\ffr.dll


    02310000[00020000]
      [ M] 102. d:\program files\rising\rav\rsstore.dll


    028E0000[000DC000]
      [ M] 103. d:\program files\rising\rav\extfile.dll


    02350000[00013000]
      [ M] 104. d:\program files\rising\rav\hookcont.dll


    02380000[00027000]
      [ M] 105. d:\program files\rising\rav\pearc.dll


    029C0000[00028000]
      [ M] 106. d:\program files\rising\rav\fakescan.dll


    029F0000[00022000]
      [ M] 107. d:\program files\rising\rav\scanner.dll


    02B30000[0002F000]
      [ M] 108. d:\program files\rising\rav\viruslib.dll


    02C60000[00028000]
      [ M] 109. d:\program files\rising\rav\relibldr.dll


    031F0000[00012000]
      [ M] 110. d:\program files\rising\rav\hookweb.dll


    044B0000[00021000]
      [ M] 111. d:\program files\rising\rav\nvfile.dll


    13AB0000[0004A000]
      [ M] 112. d:\program files\rising\rav\scanexec.dll


    05D50000[002DC000]
      [ M] 113. d:\program files\rising\rav\unexe.dll


    06130000[000D4000]
      [ M] 114. d:\program files\rising\rav\scanex.dll


    04170000[00036000]
      [ M] 115. d:\program files\rising\rav\scanpack.dll


    06580000[000B7000]
      [ M] 116. d:\program files\rising\rav\revm.dll


    06770000[00020000]
      [ M] 117. d:\program files\rising\rav\urutils.dll


    067A0000[00018000]
      [ M] 118. d:\program files\rising\rav\ur000.dat


    042B0000[00038000]
      [ M] 119. d:\program files\rising\rav\scriptci.dll


    04300000[00017000]
      [ M] 120. d:\program files\rising\rav\ur023.dat


    04F50000[000F3000]
      [ M] 121. d:\program files\rising\rav\uroutine.dll


    14210000[00038000]
      [ M] 122. d:\program files\rising\rav\extmail.dll


    05050000[00023000]
      [ M] 123. d:\program files\rising\rav\scansct.dll


    050A0000[0001D000]
      [ M] 124. d:\program files\rising\rav\ur001.dat



  + 000005c8(1480) alg.exe
    60000000[00074000]
      [AM] 55. c:\windows\system32\kmon.dll



  + 00000608(1544) spoolsv.exe
    00AF0000[00008000]
      [AM] 56. c:\windows\system32\mdimon.dll


    00B00000[00008000]
      [ M] 125. c:\windows\system32\spool\prtprocs\w32x86\mdippr.dll



  + 000006a4(1700) stormliv.exe
    00400000[00075000]
      [ M] 126. d:\program files\stormii\stormliv.exe


    75FF0000[00065000]
      [ M] 127. d:\program files\stormii\msvcp60.dll


    60000000[00074000]
      [AM] 55. c:\windows\system32\kmon.dll



  + 00000740(1856) MDM.EXE
    00400000[0004D000]
      [AM] 4. c:\program files\common files\microsoft shared\vs7debug\mdm.exe


    60000000[00074000]
      [AM] 55. c:\windows\system32\kmon.dll


    51810000[00006000]
      [ M] 128. c:\program files\common files\microsoft shared\vs7debug\2052\mdmui.dll



  + 000007b0(1968) svchost.exe

  + 00000828(2088) iexplore.exe
    60000000[00074000]
      [AM] 55. c:\windows\system32\kmon.dll


    10000000[0002E000]
      [ M] 67. d:\program files\rising\antispyware\comx3.dll


    00A10000[00019000]
      [ M] 65. d:\program files\rising\antispyware\syslay.dll


    00C50000[00138000]
      [ M] 62. c:\windows\system32\sogoupy.ime


    00FA0000[00042000]
      [ M] 63. d:\program files\sogouinput\plugin\sgimeword.dll


    03220000[0002C000]
      [AM] 36. d:\program files\thunder network\thunder\comdlls\tdatonce_now.dll


    03250000[00031000]
      [AM] 37. d:\program files\thunder network\thunder\comdlls\xunleibho_now.dll


    240A0000[0000E000]
      [ M] 87. d:\program files\thunder network\thunder\components\resworker\dsbho_01.dll


    24050000[0001E000]
      [ M] 88. d:\program files\thunder network\thunder\components\resworker\dataprocessor_01.dll


    03930000[0000E000]
      [ M] 86. d:\program files\sina\uc\ucidlehook.dll


    04710000[00028000]
      [ M] 129. d:\program files\rising\rav\ravscrch.dll


    325C0000[00012000]
      [AM] 47. d:\program files\microsoft office\office11\msohev.dll


    72C80000[00008000]
      [ M] 72. c:\windows\system32\msacm32.drv


    30000000[003AF000]
      [ M] 130. c:\windows\system32\macromed\flash\flash9f.ocx



  + 00000920(2336) Ravmon.exe
    00400000[00067000]
      [ M] 131. d:\program files\rising\rav\ravmon.exe


    7C140000[00103000]
      [ M] 90. c:\windows\system32\mfc71.dll


    7C340000[00056000]
      [ M] 91. c:\windows\system32\msvcr71.dll


    7C3A0000[0007B000]
      [ M] 92. c:\windows\system32\msvcp71.dll


    10000000[0001F000]
      [ M] 70. d:\program files\rising\rav\proccom.dll


    00B20000[00024000]
      [ M] 71. d:\program files\rising\rav\rscommx2.dll


    23700000[00028000]
      [ M] 75. d:\program files\rising\rav\rscommon.dll


    00D70000[00035000]
      [ M] 99. d:\program files\rising\rav\recomp.dll


    00DC0000[00036000]
      [ M] 100. d:\program files\rising\rav\refs.dll


    01020000[0002F000]
      [ M] 108. d:\program files\rising\rav\viruslib.dll


    01160000[00028000]
      [ M] 109. d:\program files\rising\rav\relibldr.dll


    011E0000[0000E000]
      [ M] 76. d:\program files\rising\rav\rsappmgr.dll


    01200000[00030000]
      [ M] 77. d:\program files\rising\rav\cfgdll.dll


    01360000[00075000]
      [ M] 94. d:\program files\rising\rav\monrule.dll


    23900000[00040000]
      [ M] 132. d:\program files\rising\rav\pngdll.dll


    014B0000[00138000]
      [ M] 62. c:\windows\system32\sogoupy.ime


    029E0000[00042000]
      [ M] 63. d:\program files\sogouinput\plugin\sgimeword.dll


    26600000[000A8000]
      [ M] 133. d:\program files\rising\rav\rsguilib.dll


    23800000[00022000]
      [ M] 134. d:\program files\rising\rav\rsxml.dll



  + 000009f4(2548) RavStub.exe
    00400000[00021000]
      [ M] 135. d:\program files\rising\rav\ravstub.exe


    10000000[0001F000]
      [ M] 70. d:\program files\rising\rav\proccom.dll


    00620000[00024000]
      [ M] 71. d:\program files\rising\rav\rscommx2.dll


    23700000[00028000]
      [ M] 75. d:\program files\rising\rav\rscommon.dll



  + 00000a40(2624) ras.exe
    00400000[0000B000]
      [ M] 136. d:\program files\rising\antispyware\ras.exe


    7C140000[00103000]
      [ M] 137. d:\program files\rising\antispyware\mfc71.dll


    7C340000[00056000]
      [ M] 61. d:\program files\rising\antispyware\msvcr71.dll


    10000000[00047000]
      [ M] 138. d:\program files\rising\antispyware\kakamgr.dll


    7C3A0000[0007B000]
      [ M] 60. d:\program files\rising\antispyware\msvcp71.dll


    00B40000[00019000]
      [ M] 65. d:\program files\rising\antispyware\syslay.dll


    00B70000[0001F000]
      [ M] 70. d:\program files\rising\rav\proccom.dll


    00B90000[00024000]
      [ M] 71. d:\program files\rising\rav\rscommx2.dll


    00CE0000[0002E000]
      [ M] 67. d:\program files\rising\antispyware\comx3.dll


    00F50000[00058000]
      [ M] 139. d:\program files\rising\antispyware\dbmgr.dll


    23800000[00022000]
      [ M] 59. d:\program files\rising\antispyware\rsxml.dll


    010B0000[0002D000]
      [ M] 140. d:\program files\rising\antispyware\pweb.dll


    010E0000[000C1000]
      [ M] 141. d:\program files\rising\antispyware\pscan.dll


    011B0000[0002F000]
      [ M] 74. d:\program files\rising\antispyware\ncomm.dll


    01200000[00070000]
      [ M] 142. d:\program files\rising\antispyware\pset.dll


    01290000[0002A000]
      [ M] 143. d:\program files\rising\antispyware\pdefend.dll


    01360000[000B6000]
      [ M] 144. d:\program files\rising\antispyware\ptools.dll


    012C0000[0008C000]
      [ M] 145. d:\program files\rising\antispyware\psysinfo.dll


    23900000[00040000]
      [ M] 68. d:\program files\rising\antispyware\pngdll.dll


    017C0000[00138000]
      [ M] 62. c:\windows\system32\sogoupy.ime


    02CC0000[00042000]
      [ M] 63. d:\program files\sogouinput\plugin\sgimeword.dll


    03560000[0000E000]
      [ M] 86. d:\program files\sina\uc\ucidlehook.dll


    05320000[00028000]
      [ M] 129. d:\program files\rising\rav\ravscrch.dll


    30000000[003AF000]
      [ M] 130. c:\windows\system32\macromed\flash\flash9f.ocx


    72C80000[00008000]
      [ M] 72. c:\windows\system32\msacm32.drv



  + 00000da4(3492) uc.exe
    00400000[0070E000]
      [ M] 146. d:\program files\sina\uc\uc.exe


    400B0000[00149000]
      [ M] 147. d:\program files\sina\uc\vcl60.bpl


    40000000[000AD000]
      [ M] 148. d:\program files\sina\uc\rtl60.bpl


    00370000[0003A000]
      [ M] 149. d:\program files\sina\uc\vclx60.bpl


    40250000[0003B000]
      [ M] 150. d:\program files\sina\uc\vclie60.bpl


    003B0000[00026000]
      [ M] 151. d:\program files\sina\uc\bcbie60.bpl


    01190000[0000B000]
      [ M] 152. d:\program files\sina\uc\borlndmm.dll


    32600000[00178000]
      [ M] 153. d:\program files\sina\uc\cc3260mt.dll


    003E0000[0000D000]
      [ M] 154. d:\program files\sina\uc\ucavatar.bpl


    00B10000[001B6000]
      [ M] 155. d:\program files\sina\uc\ucchatroom.bpl


    00CD0000[00050000]
      [ M] 156. d:\program files\sina\uc\uchm.bpl


    00D20000[00066000]
      [ M] 157. d:\program files\sina\uc\languageres.dll


    00D90000[00074000]
      [ M] 158. d:\program files\sina\uc\ucdcontrol.bpl


    00E10000[0014A000]
      [ M] 159. d:\program files\sina\uc\ucui.bpl


    00F60000[0002C000]
      [ M] 160. d:\program files\sina\uc\ucskin.bpl


    00F90000[0004B000]
      [ M] 161. d:\program files\sina\uc\ucudpmessager.dll


    00FE0000[0009D000]
      [ M] 162. d:\program files\sina\uc\stlpmt45.dll


    003F0000[0000C000]
      [ M] 163. d:\program files\sina\uc\ucapi.dll


    011A0000[002CC000]
      [ M] 164. d:\program files\sina\uc\ucres.dll


    01080000[00089000]
      [ M] 165. d:\program files\sina\uc\ucdatamanager.dll


    01110000[00026000]
      [ M] 166. d:\program files\sina\uc\ucmargin.dll


    10000000[00138000]
      [ M] 62. c:\windows\system32\sogoupy.ime


    034F0000[00042000]
      [ M] 63. d:\program files\sogouinput\plugin\sgimeword.dll


    03760000[0006C000]
      [ M] 167. d:\program files\sina\uc\riched20.dll


    037E0000[00005000]
      [ M] 168. d:\program files\sina\uc\riched32.dll


    04BF0000[0000E000]
      [ M] 86. d:\program files\sina\uc\ucidlehook.dll


    04D80000[00023000]
      [ M] 169. d:\program files\sina\uc\uchttpdl.dll


    052D0000[0008A000]
      [ M] 170. d:\program files\sina\uc\helpex.dll


    05360000[00095000]
      [ M] 171. d:\program files\sina\uc\ucemtmgr.dll


    05420000[00070000]
      [ M] 172. d:\program files\sina\uc\livechatctrl.ocx


    054C0000[00018000]
      [ M] 173. d:\program files\sina\uc\blogcheckdll.dll


    40350000[000DE000]
      [ M] 174. d:\program files\sina\uc\xmlrtl60.bpl


    054E0000[00010000]
      [ M] 175. d:\program files\sina\uc\utntyper.dll


    05500000[0002F000]
      [ M] 176. d:\program files\sina\uc\ucbugcatch.dll


    05940000[0005D000]
      [ M] 177. d:\program files\sina\uc\ucsocket.dll


    0DCD0000[00099000]
      [ M] 178. d:\program files\sina\uc\ucddp.dll


    0E3D0000[00035000]
      [ M] 179. d:\program files\sina\uc\ucvideo.dll


    05150000[00010000]
      [ M] 180. d:\program files\sina\uc\ucprocess.dll


    0E5B0000[0003B000]
      [ M] 181. d:\program files\sina\uc\uctransfer.dll


    05B20000[0001A000]
      [ M] 182. d:\program files\sina\uc\ucudpft.dll


    0E410000[00028000]
      [ M] 129. d:\program files\rising\rav\ravscrch.dll


    0EC30000[00041000]
      [ M] 183. d:\program files\sina\uc\activex\avatardisplay.dll


    72C80000[00008000]
      [ M] 72. c:\windows\system32\msacm32.drv



  + 00000de4(3556) wuauclt.exe
    60000000[00074000]
      [AM] 55. c:\windows\system32\kmon.dll


    10000000[0002E000]
      [ M] 67. d:\program files\rising\antispyware\comx3.dll


    01290000[00019000]
      [ M] 65. d:\program files\rising\antispyware\syslay.dll



  + 00000e58(3672) QQ.exe
    00400000[001FC000]
      [ M] 184. d:\program files\tencent\qq.exe


    614D0000[0033E000]
      [ M] 185. d:\program files\tencent\qqbaseclassindll.dll


    61960000[000F2000]
      [ M] 186. d:\program files\tencent\qqhelperdll.dll


    600A0000[00070000]
      [ M] 187. d:\program files\tencent\basicctrldll.dll


    60B00000[000F2000]
      [ M] 188. d:\program files\tencent\mfc42.dll


    10000000[0000C000]
      [ M] 189. d:\program files\tencent\msimg32.dll


    00D10000[00138000]
      [ M] 62. c:\windows\system32\sogoupy.ime


    02240000[00042000]
      [ M] 63. d:\program files\sogouinput\plugin\sgimeword.dll


    026D0000[000D2000]
      [ M] 190. d:\program files\tencent\caihong.dll


    626F0000[00005000]
      [ M] 191. d:\program files\tencent\riched32.dll


    62680000[00068000]
      [ M] 192. d:\program files\tencent\riched20.dll


    61440000[0003D000]
      [ M] 193. d:\program files\tencent\qqapi.dll


    608D0000[00047000]
      [ M] 194. d:\program files\tencent\loginctrl.dll


    60920000[0009C000]
      [ M] 195. d:\program files\tencent\loginctrlres.dll


    61E30000[00629000]
      [ M] 196. d:\program files\tencent\qqres.dll


    61AB0000[000D7000]
      [ M] 197. d:\program files\tencent\qqmainframe.dll


    60480000[001A3000]
      [ M] 198. d:\program files\tencent\gdiplus.dll


    62870000[00022000]
      [ M] 199. d:\program files\tencent\unreadmsgmgr.dll


    61CE0000[00142000]
      [ M] 200. d:\program files\tencent\qqplugin.dll


    61190000[002AB000]
      [ M] 201. d:\program files\tencent\qqallinone.dll


    62710000[0002B000]
      [ M] 202. d:\program files\tencent\sccore.dll


    60130000[00036000]
      [ M] 203. d:\program files\tencent\cameradll.dll


    040C0000[00195000]
      [ M] 204. d:\program files\tencent\cqqapplication.dll


    60430000[00047000]
      [ M] 205. d:\program files\tencent\flashavatardll.dll


    60CA0000[0005F000]
      [ M] 206. d:\program files\tencent\newskin.dll


    60AC0000[00034000]
      [ M] 207. d:\program files\tencent\mailsummary.dll


    62510000[0002D000]
      [ M] 208. d:\program files\tencent\qqspace.dll


    022B0000[00031000]
      [ M] 209. d:\program files\tencent\vbscript.dll


    73460000[0006B000]
      [ M] 210. d:\program files\tencent\encode.dll


    73510000[00025000]
      [ M] 211. c:\windows\scrrun.dll


    5CD80000[00018000]
      [ M] 212. c:\windows\wshom.ocx


    30000000[003AF000]
      [ M] 130. c:\windows\system32\macromed\flash\flash9f.ocx


    72C80000[00008000]
      [ M] 72. c:\windows\system32\msacm32.drv


    60D00000[00015000]
      [ M] 213. d:\program files\tencent\oemapplication.dll


    06D00000[00044000]
      [ M] 214. d:\program files\tencent\qqavatar.dll


    06D50000[0001D000]
      [ M] 215. d:\program files\tencent\reporter.dll


    61A60000[00018000]
      [ M] 216. d:\program files\tencent\qqknowledgesearch.dll


    618D0000[00086000]
      [ M] 217. d:\program files\tencent\qqgroupmng.dll


    62660000[00017000]
      [ M] 218. d:\program files\tencent\qringmng.dll


    03DA0000[00052000]
      [ M] 219. d:\program files\tencent\qqsysmsgmng.dll


    628A0000[0001D000]
      [ M] 220. d:\program files\tencent\userdefinedhead.dll


    61810000[0000E000]
      [ M] 221. d:\program files\tencent\qqconfigplugin.dll


    61820000[00056000]
      [ M] 222. d:\program files\tencent\qqcustomface.dll


    609C0000[000D4000]
      [ M] 223. d:\program files\tencent\longconnection.dll


    60DA0000[00027000]
      [ M] 224. d:\program files\tencent\phoneapi.dll


    603E0000[0000D000]
      [ M] 225. d:\program files\tencent\dialerallinone.dll


    60170000[0004F000]
      [ M] 226. d:\program files\tencent\commercesmng.dll


    60D20000[0000F000]
      [ M] 227. d:\program files\tencent\personaldesktop.dll


    07320000[00287000]
      [ M] 228. d:\program files\tencent\qqaddr.dll


    62460000[0002D000]
      [ M] 229. d:\program files\tencent\qqscenemng.dll


    035B0000[00037000]
      [ M] 230. d:\program files\tencent\addrsearch.dll


    62490000[0006F000]
      [ M] 231. d:\program files\tencent\qqsettingctrl.dll


    033F0000[0000E000]
      [ M] 86. d:\program files\sina\uc\ucidlehook.dll


    03650000[0000B000]
      [AM] 39. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll



  + 00000f4c(3916) TXPlatform.exe
    00400000[00025000]
      [ M] 232. d:\program files\tencent\txplatform.exe


    60000000[00074000]
      [AM] 55. c:\windows\system32\kmon.dll


    10000000[0002E000]
      [ M] 67. d:\program files\rising\antispyware\comx3.dll


    003E0000[00019000]
      [ M] 65. d:\program files\rising\antispyware\syslay.dll 

是这个吗？麻烦您了啊！

卡卡的系统修复不行啊！重启还是那个流氓网站啊！

扫SRENG日志发这论坛来

下载SRENG2.6版工具：http://www.kztechs.com/sreng/download.html

1 下载的是压缩包，必须解压缩后再运行。
2 运行SREng***.EXE
3 选择主界面左边的：智能扫描=》扫描=》保存报告
4 把报告保存后，将日志发这论坛来。

CODE]

2008-09-09,10:56:56

System Repair Engineer 2.6.12.1018
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件
    进程特权扫描


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <RavTask><"d:\Program Files\Rising\Rav\RavTask.exe" -system>  [(Verified)Beijing Rising Information Technology Corporation Limited]
    <runeip><"d:\Program Files\Rising\AntiSpyware\rstray.exe" /startup>  [(Verified)Beijing Rising Information Technology Corporation Limited]
    <360Safebox><"C:\Program Files\360Safebox\safeboxTray.exe" /r>  [(Verified)Qizhi Software (beijing) Co. Ltd]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Windows Publisher]
    <Userinit><userinit.exe,>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><kmon.dll>  [(Verified)Beijing Rising Information Technology Corporation Limited]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
    <WinlogonNotify: igfxcui><igfxdev.dll>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
    <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
    <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
    <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
    <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
    <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
    <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
    <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp.inf,PerUserStub>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
    <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [File is missing]

==================================
启动文件夹
N/A

==================================
服务
[AddFiltr / AddFiltr][Stopped/Manual Start]
  <"C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe"><Hewlett-Packard Development Company, L.P.>
[Contrl Center of Storm Media / ccosm][Running/Auto Start]
  <d:\Program Files\StormII\stormliv.exe /asservice><北京暴风网际科技有限公司>
[Google Updater Service / gusvc][Stopped/Manual Start]
  <"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"><Google>
[Human Interface Device Access / HidServ][Stopped/Disabled]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[hpqwmiex / hpqwmiex][Running/Auto Start]
  <C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe><Hewlett-Packard Development Company, L.P.>
[Rising Process Communication Center / RsCCenter][Running/Auto Start]
  <"d:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Information Technology Co., Ltd.>
[Rising RealTime Monitor / RsRavMon][Stopped/Auto Start]
  <"D:\PROGRAM FILES\RISING\RAV\Ravmond.exe"><Beijing Rising Information Technology Co., Ltd.>
[XAudioService / XAudioService][Stopped/Auto Start]
  <C:\WINDOWS\system32\DRIVERS\xaudio.exe><Conexant Systems, Inc.>

==================================
驱动程序
[Broadcom 802.11 网络适配器驱动程序 / BCM43XX][Stopped/Manual Start]
  <system32\DRIVERS\bcmwl5.sys><Broadcom Corporation>
[Intel(R) PRO Network Connection Driver / E100B][Running/Manual Start]
  <system32\DRIVERS\e100b325.sys><Intel Corporation>
[eabfiltr / eabfiltr][Running/System Start]
  <system32\DRIVERS\eabfiltr.sys><Hewlett-Packard Development Company, L.P.>
[eabusb / eabusb][Stopped/Manual Start]
  <system32\DRIVERS\eabusb.sys><Hewlett-Packard Development Company, L.P.>
[HBtnKey / HBtnKey][Running/Manual Start]
  <system32\DRIVERS\cpqbttn.sys><Hewlett-Packard Development Company, L.P.>
[Microsoft UAA Function Driver for High Definition Audio Service / HdAudAddService][Running/Manual Start]
  <system32\drivers\CHDAud.sys><Conexant Systems Inc.>
[Microsoft 用于 High Definition Audio 的 UAA 总线驱动程序 / HDAudBus][Running/Manual Start]
  <system32\DRIVERS\HDAudBus.sys><Windows (R) Server 2003 DDK provider>
[HookCont / HookCont][Running/System Start]
  <\SystemRoot\system32\drivers\HookCont.sys><Beijing Rising Information Technology Co., Ltd.>
[HookNtos / HookNtos][Running/System Start]
  <\SystemRoot\system32\drivers\HookNtos.sys><Beijing Rising Information Technology Co., Ltd.>
[HookReg / HookReg][Running/System Start]
  <\SystemRoot\system32\drivers\HookReg.sys><Beijing Rising Information Technology Co., Ltd.>
[HookSys / HookSys][Running/System Start]
  <\SystemRoot\system32\drivers\HookSys.sys><Beijing Rising Information Technology Co., Ltd.>
[HSF_DPV / HSF_DPV][Running/Manual Start]
  <system32\DRIVERS\HSX_DPV.sys><Conexant Systems, Inc.>
[HSXHWAZL / HSXHWAZL][Running/Manual Start]
  <system32\DRIVERS\HSXHWAZL.sys><Conexant Systems, Inc.>
[ialm / ialm][Running/Manual Start]
  <system32\DRIVERS\igxpmp32.sys><Intel Corporation>
[mdmxsdk / mdmxsdk][Running/Auto Start]
  <system32\DRIVERS\mdmxsdk.sys><Conexant>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[RsNTGDI / RsNTGDI][Running/Boot Start]
  <\SystemRoot\system32\Drivers\RsNTGdi.sys><Beijing Rising Information Technology Co., Ltd.>
[SafeBoxKrnl / SafeBoxKrnl][Running/System Start]
  <\??\C:\WINDOWS\system32\drivers\SafeBoxKrnl.sys><360安全中心>
[Secdrv / Secdrv][Stopped/Manual Start]
  <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
[TesSafe / TesSafe][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\TesSafe.sys><TENCENT>
[Conexant Setup API / UIUSys][Stopped/Manual Start]
  <system32\DRIVERS\UIUSYS.SYS><N/A>
[winachsf / winachsf][Running/Manual Start]
  <system32\DRIVERS\HSX_CNXT.sys><Conexant Systems, Inc.>
[XAudio / XAudio][Running/Auto Start]
  <system32\DRIVERS\xaudio.sys><Conexant Systems, Inc.>
[zinem / zinem][Running/Boot Start]
  <\SystemRoot\system32\drivers\zinem.sys><N/A>
[ZSMC USB PC Camera (ZS211) / ZSMC211][Running/Manual Start]
  <System32\Drivers\ZS211.sys><ZSMC.Corporation>

==================================
浏览器加载项
[ThunderAtOnce Class]
  {01443AEC-0FD1-40fd-9C87-E93D1494C233} <d:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll, (Signed) Thunder Networking Technologies,LTD>
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <D:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll, (Signed) Thunder Networking Technologies,LTD>
[启动迅雷5]
  {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <d:\Program Files\Thunder Network\Thunder\Thunder.exe, Thunder Networking Technologies,LTD>
[信息检索(&R)]
  {92780B25-18CC-41C8-B9BE-3C9C571A8263} <D:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL, (Signed) Microsoft Corporation>
[畅游巡警]
  {B057BF9C-55B4-4AA4-938A-FE78617866B8} <C:\Program Files\Sucop\SecPlugin\SecPlugin.dll, 超级巡警>
[&Google]
  {2318C2B1-4965-11d4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, (Signed) Google Inc.>
[ThunderAtOnce Class]
  {01443AEC-0FD1-40FD-9C87-E93D1494C233} <d:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll, (Signed) Thunder Networking Technologies,LTD>
[]
  {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <, >
[&Google]
  {2318C2B1-4965-11D4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, (Signed) Google Inc.>
[Thunder Agent Class]
  {485463B7-8FB2-4B3B-B29B-8B919B0EACCE} <D:\Program Files\Thunder Network\Thunder\ComDlls\ThunderAgent_Now.dll, (Signed) Thunder Networking Technologies,LTD>
[Windows Media Player]
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
[]
  {7B71B9D0-7A6B-4CD4-BFAD-A8852409A1D9} <, >
[360SafeLive]
  {87515F61-A66C-4319-A0E0-D416CB8059E3} <d:\Program Files\360safe\live.dll, (Signed) 360.cn>
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <D:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll, (Signed) Thunder Networking Technologies,LTD>
[]
  {92780B25-18CC-41C8-B9BE-3C9C571A8263} <, >
[Google Toolbar Helper]
  {AA58ED58-01DD-4D91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, (Signed) Google Inc.>
[]
  {AF69627B-8489-41C2-971A-B927DF7A5B0F} <, >
[Google Toolbar Notifier BHO]
  {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll, (Signed) Google Inc.>
[畅游巡警]
  {B057BF9C-55B4-4AA4-938A-FE78617866B8} <C:\Program Files\Sucop\SecPlugin\SecPlugin.dll, 超级巡警>
[SearchAssistantOC]
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, (Signed) N/A>
[RDS.DataSpace]
  {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, (Signed) Microsoft Corporation>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx, (Signed) Adobe Systems, Inc.>
[]
  {FB5F1910-F110-11D2-BB9E-00C04F795683} <, >
[使用迅雷下载]
  <D:\Program Files\Thunder Network\Thunder\Program\geturl.htm, N/A>
[使用迅雷下载全部链接]
  <D:\Program Files\Thunder Network\Thunder\Program\getallurl.htm, N/A>

==================================
正在运行的进程
[PID: 624 / SYSTEM][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 696 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 720 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\SOGOUPY.IME]  [Sogou.com Inc., 3.5.0.0]
[PID: 764 / SYSTEM][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 776 / SYSTEM][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 920 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1000 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1044 / SYSTEM][d:\Program Files\Rising\Rav\CCenter.exe]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.33]
[PID: 1060 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1100 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1232 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1380 / ken][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 28]
    [C:\WINDOWS\system32\SOGOUPY.IME]  [Sogou.com Inc., 3.5.0.0]
    [d:\Program Files\SogouInput\Plugin\SgImeWord.dll]  [Sogou.com Inc., 3.5.0.0]
    [C:\Program Files\Common Files\Ahead\Lib\NeroDigitalExt.dll]  [Nero AG, 2, 0, 0, 8]
    [C:\Program Files\Common Files\Ahead\Lib\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Common Files\Ahead\Lib\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\Common Files\Ahead\Lib\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\igfxpph.dll]  [Intel Corporation, 3.0.0.4670]
    [C:\WINDOWS\system32\hccutils.DLL]  [Intel Corporation, 3.0.0.4670]
    [C:\WINDOWS\system32\igfxres.dll]  [Intel Corporation, 3.0.0.4670]
    [C:\WINDOWS\system32\igfxress.dll]  [Intel Corporation, 3.0.0.4670]
    [C:\WINDOWS\system32\igfxsrvc.dll]  [Intel Corporation, 3.0.0.4670]
    [D:\Program Files\sina\UC\UCIdleHook.dll]  [北京新浪信息技术有限公司, 1, 0, 1, 0]
    [d:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll]  [Thunder Networking Technologies,LTD, 1.0.5.29]
    [D:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll]  [Thunder Networking Technologies,LTD, 5, 0, 8, 96]
    [D:\Program Files\Thunder Network\Thunder\Components\ResWorker\DsBho_01.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 20]
    [D:\Program Files\Thunder Network\Thunder\Components\ResWorker\DataProcessor_01.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 16]
    [C:\Program Files\Nero\Nero 7\Nero BackItUp\NBShell.dll]  [Nero AG, 2, 0, 4, 3]
    [C:\Program Files\Nero\Nero 7\Nero BackItUp\MFC71U.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [d:\Program Files\WinRAR\rarext.dll]  [N/A, ]
    [C:\WINDOWS\system32\RavExt.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.18]
    [d:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17]
    [C:\WINDOWS\system32\msdmo.dll]  [, ]
[PID: 1404 / SYSTEM][D:\PROGRAM FILES\RISING\RAV\ravmond.exe]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.80]
    [D:\PROGRAM FILES\RISING\RAV\BWList.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.5]
    [C:\WINDOWS\system32\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [D:\PROGRAM FILES\RISING\RAV\RSAPPMGR.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.1]
    [D:\PROGRAM FILES\RISING\RAV\CfgDll.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.19]
    [D:\PROGRAM FILES\RISING\RAV\RsLog.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.36]
    [D:\PROGRAM FILES\RISING\RAV\ProcCom.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [D:\PROGRAM FILES\RISING\RAV\RsCommX2.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [D:\PROGRAM FILES\RISING\RAV\MonRule.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.29]
    [D:\PROGRAM FILES\RISING\RAV\Hooksys.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 12]
    [C:\WINDOWS\system32\SOGOUPY.IME]  [Sogou.com Inc., 3.5.0.0]
    [D:\PROGRAM FILES\RISING\RAV\HookReg.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6]
    [D:\PROGRAM FILES\RISING\RAV\HookNtos.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5]
    [D:\PROGRAM FILES\RISING\RAV\rswalmon.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 24]
    [D:\PROGRAM FILES\RISING\RAV\recomp.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 41]
    [D:\PROGRAM FILES\RISING\RAV\refs.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 18]
    [D:\PROGRAM FILES\RISING\RAV\ffr.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 16]
    [d:\Program Files\Rising\Rav\RsStore.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.9]
    [D:\PROGRAM FILES\RISING\RAV\extfile.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 32]
    [D:\PROGRAM FILES\RISING\RAV\HookCont.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    [D:\PROGRAM FILES\RISING\RAV\pearc.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 8]
    [d:\Program Files\Rising\Rav\fakescan.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.14]
    [d:\Program Files\Rising\Rav\Scanner.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.39]
    [D:\PROGRAM FILES\RISING\RAV\viruslib.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 27]
    [D:\PROGRAM FILES\RISING\RAV\relibldr.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17]
    [D:\PROGRAM FILES\RISING\RAV\HookWeb.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.3]
    [D:\PROGRAM FILES\RISING\RAV\nvfile.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 7]
    [D:\PROGRAM FILES\RISING\RAV\scanexec.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 22]
    [D:\PROGRAM FILES\RISING\RAV\unexe.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 6]
    [D:\PROGRAM FILES\RISING\RAV\scanex.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 90]
    [D:\PROGRAM FILES\RISING\RAV\scanpack.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 10]
    [D:\PROGRAM FILES\RISING\RAV\revm.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 11]
    [D:\PROGRAM FILES\RISING\RAV\urutils.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 7]
    [D:\PROGRAM FILES\RISING\RAV\ur000.dat]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [D:\PROGRAM FILES\RISING\RAV\scriptci.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 4]
    [D:\PROGRAM FILES\RISING\RAV\ur023.dat]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 3]
    [D:\PROGRAM FILES\RISING\RAV\uroutine.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 27]
    [D:\PROGRAM FILES\RISING\RAV\extmail.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 10]
    [D:\PROGRAM FILES\RISING\RAV\scansct.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 11]
    [D:\PROGRAM FILES\RISING\RAV\ur001.dat]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 4]
[PID: 1544 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
[PID: 1700 / SYSTEM][d:\Program Files\StormII\stormliv.exe]  [北京暴风网际科技有限公司, 3, 8, 3, 15]

[d:\Program Files\StormII\MSVCP60.dll]  [Microsoft Corporation, 6.02.3104.0]
    [C:\WINDOWS\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 28]
[PID: 1856 / SYSTEM][C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE]  [Microsoft Corporation, 7.00.9466]
    [C:\WINDOWS\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 28]
    [C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\2052\mdmui.dll]  [Microsoft Corporation, 7.00.9466]
[PID: 1968 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 188 / SYSTEM][C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe]  [Hewlett-Packard Development Company, L.P., 2, 0, 1, 9]
    [C:\WINDOWS\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 28]
[PID: 1348 / ken][D:\Program Files\Rising\Rav\RavTask.exe]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.24]
    [C:\WINDOWS\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 28]
    [D:\Program Files\Rising\Rav\ProcCom.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [D:\Program Files\Rising\Rav\RsCommX2.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [D:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17]
    [D:\Program Files\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.1]
    [D:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.19]
    [C:\WINDOWS\system32\SOGOUPY.IME]  [Sogou.com Inc., 3.5.0.0]
    [d:\Program Files\SogouInput\Plugin\SgImeWord.dll]  [Sogou.com Inc., 3.5.0.0]
[PID: 304 / ken][D:\Program Files\Rising\AntiSpyware\rstray.exe]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.15]
    [C:\WINDOWS\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 28]
    [D:\Program Files\Rising\AntiSpyware\rsmginfo.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 8]
    [D:\Program Files\Rising\AntiSpyware\RsXML.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 2]
    [D:\Program Files\Rising\AntiSpyware\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [D:\Program Files\Rising\AntiSpyware\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\WINDOWS\system32\SOGOUPY.IME]  [Sogou.com Inc., 3.5.0.0]
    [d:\Program Files\SogouInput\Plugin\SgImeWord.dll]  [Sogou.com Inc., 3.5.0.0]
    [D:\Program Files\Rising\AntiSpyware\ComServ.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.31]
    [D:\Program Files\Rising\AntiSpyware\Syslay.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    [D:\Program Files\Rising\AntiSpyware\rscommon.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.1.1]
    [D:\Program Files\Rising\AntiSpyware\comx3.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.34]
    [D:\Program Files\Rising\AntiSpyware\pngdll.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5]
    [D:\Program Files\Rising\AntiSpyware\runiep.dll]  [Beijing Rising Information Technology Co., Ltd., 6.0.0.33]
    [d:\Program Files\Rising\Rav\ProcCom.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [d:\Program Files\Rising\Rav\RsCommX2.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
[PID: 412 / ken][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 28]
    [C:\WINDOWS\system32\SOGOUPY.IME]  [Sogou.com Inc., 3.5.0.0]
    [d:\Program Files\SogouInput\Plugin\SgImeWord.dll]  [Sogou.com Inc., 3.5.0.0]
[PID: 1480 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\System32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 28]
[PID: 2336 / ken][D:\Program Files\Rising\Rav\Ravmon.exe]  [Beijing Rising Information Technology Co., Ltd., 20.0.01.27]
    [C:\WINDOWS\system32\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [D:\Program Files\Rising\Rav\ProcCom.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [D:\Program Files\Rising\Rav\RsCommX2.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [D:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17]
    [D:\Program Files\Rising\Rav\recomp.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 41]
    [D:\Program Files\Rising\Rav\refs.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 18]
    [D:\Program Files\Rising\Rav\viruslib.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 27]
    [D:\Program Files\Rising\Rav\relibldr.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17]
    [D:\Program Files\Rising\Rav\RSAPPMGR.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.1]
    [D:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.19]
    [D:\Program Files\Rising\Rav\MonRule.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.29]
    [D:\Program Files\Rising\Rav\PngDll.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5]
    [C:\WINDOWS\system32\SOGOUPY.IME]  [Sogou.com Inc., 3.5.0.0]
    [d:\Program Files\SogouInput\Plugin\SgImeWord.dll]  [Sogou.com Inc., 3.5.0.0]
    [D:\Program Files\Rising\Rav\Rsguilib.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 90]
    [D:\Program Files\Rising\Rav\RsXML.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 2]
[PID: 2548 / SYSTEM][D:\PROGRAM FILES\RISING\RAV\RavStub.exe]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.10]
    [D:\PROGRAM FILES\RISING\RAV\ProcCom.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [D:\PROGRAM FILES\RISING\RAV\RsCommX2.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [D:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17]
[PID: 3916 / ken][d:\Program Files\Tencent\TXPlatform.exe]  [Tencent, 1, 5, 225, 0]
    [C:\WINDOWS\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 28]
    [d:\Program Files\Rising\AntiSpyware\comx3.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.34]
    [d:\Program Files\Rising\AntiSpyware\Syslay.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
[PID: 3556 / ken][C:\WINDOWS\system32\wuauclt.exe]  [Microsoft Corporation, 5.4.3790.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 28]
    [d:\Program Files\Rising\AntiSpyware\comx3.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.34]
    [d:\Program Files\Rising\AntiSpyware\Syslay.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
[PID: 1204 / ken][C:\WINDOWS\system32\conime.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 28]
    [d:\Program Files\Rising\AntiSpyware\comx3.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.34]
    [d:\Program Files\Rising\AntiSpyware\Syslay.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    [C:\WINDOWS\system32\SOGOUPY.IME]  [Sogou.com Inc., 3.5.0.0]
    [d:\Program Files\SogouInput\Plugin\SgImeWord.dll]  [Sogou.com Inc., 3.5.0.0]
[PID: 2088 / ken][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 28]
    [d:\Program Files\Rising\AntiSpyware\comx3.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.34]
    [d:\Program Files\Rising\AntiSpyware\Syslay.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    [C:\WINDOWS\system32\SOGOUPY.IME]  [Sogou.com Inc., 3.5.0.0]
    [d:\Program Files\SogouInput\Plugin\SgImeWord.dll]  [Sogou.com Inc., 3.5.0.0]
    [d:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll]  [Thunder Networking Technologies,LTD, 1.0.5.29]
    [D:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll]  [Thunder Networking Technologies,LTD, 5, 0, 8, 96]
    [D:\Program Files\Thunder Network\Thunder\Components\ResWorker\DsBho_01.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 20]
    [D:\Program Files\Thunder Network\Thunder\Components\ResWorker\DataProcessor_01.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 16]
    [D:\Program Files\sina\UC\UCIdleHook.dll]  [北京新浪信息技术有限公司, 1, 0, 1, 0]
    [d:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx]  [Adobe Systems, Inc., 9,0,124,0]
[PID: 960 / ken][d:\Program Files\Rising\AntiSpyware\knownsvr.exe]  [Beijing Rising Information Technology Co., Ltd., 6.0.0.11]
    [d:\Program Files\Rising\AntiSpyware\NComm.dll]  [Beijing Rising Information Technology Co., Ltd., 6.0.0.6]
    [C:\WINDOWS\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 28]
    [d:\Program Files\Rising\AntiSpyware\comx3.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.34]
    [d:\Program Files\Rising\AntiSpyware\Syslay.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
[PID: 2228 / ken][D:\Program Files\Thunder Network\Thunder\Program\Thunder5.exe]  [Thunder Networking Technologies,LTD, 5.8.3.556]
    [D:\Program Files\Thunder Network\Thunder\Program\BugReport.dll]  [Thunder Networking Technologies,LTD, 1, 4, 1, 20]
    [D:\Program Files\Thunder Network\Thunder\Program\TaskManager.dll]  [Thunder Networking Technologies,LTD, 1, 3, 8, 68]
    [D:\Program Files\Thunder Network\Thunder\Program\download_interface.dll]  [Thunder Networking Technologies,LTD, 3, 1, 2, 318]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [D:\Program Files\Thunder Network\Thunder\Program\asyn_frame.dll]  [Thunder Networking Technologies,LTD, 1, 1, 2, 21]
    [D:\Program Files\Thunder Network\Thunder\Program\ATL71.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [D:\Program Files\Thunder Network\Thunder\Program\emule_id.dll]  [, 1, 0, 2, 8]
    [D:\Program Files\Thunder Network\Thunder\Program\backend_agent.dll]  [Thunder Networking Technologies,LTD, 1, 1, 2, 20]
    [D:\Program Files\Thunder Network\Thunder\Program\ptl.dll]  [Thunder Networking Technologies,LTD, 3, 1, 2, 24]
    [D:\Program Files\Thunder Network\Thunder\Program\xl_stat.dll]  [Thunder Networking Technologies,LTD, 1, 1, 2, 3]
    [D:\Program Files\Thunder Network\Thunder\Program\p2p_network_com.dll]  [, 1, 0, 2, 25]
    [D:\Program Files\Thunder Network\Thunder\Program\fs.dll]  [Thunder Networking Technologies,LTD, 1, 1, 2, 10]
    [C:\WINDOWS\system32\SOGOUPY.IME]  [Sogou.com Inc., 3.5.0.0]
    [D:\Program Files\Thunder Network\Thunder\Program\XLNet.Dll]  [Thunder Networking Technologies,LTD, 1, 5, 2, 25]
    [d:\Program Files\SogouInput\Plugin\SgImeWord.dll]  [Sogou.com Inc., 3.5.0.0]
    [D:\Program Files\Thunder Network\Thunder\Program\BHOStub.dll]  [Thunder Networking Technologies,LTD, 1, 1, 1, 10]
    [D:\Program Files\Thunder Network\Thunder\Components\DownAndPlay\DownAndPlay.dll]  [, 1, 0, 12, 30]
    [D:\Program Files\Thunder Network\Thunder\Program\p2sp.dll]  [Thunder Networking Technologies,LTD, 1, 1, 2, 25]
    [D:\Program Files\Thunder Network\Thunder\Program\down_dispatcher.dll]  [Thunder Networking Technologies,LTD, 1, 0, 2, 17]
    [d:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5]
    [D:\Program Files\sina\UC\UCIdleHook.dll]  [北京新浪信息技术有限公司, 1, 0, 1, 0]
    [D:\Program Files\Thunder Network\Thunder\Program\iTargetAD.dll]  [Thunder Networking Technologies,LTD, 1, 0, 4, 35]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx]  [Adobe Systems, Inc., 9,0,124,0]
    [D:\Program Files\Thunder Network\Thunder\Program\p2p.dll]  [Thunder Networking Technologies,LTD, 1,1,2,24]
    [D:\Program Files\Thunder Network\Thunder\Program\xldc.dll]  [Thunder Networking Technologies,LTD, 3, 6, 2, 15]
    [D:\Program Files\Thunder Network\Thunder\Program\stream.dll]  [Thunder Networking Technologies,LTD, 2, 1, 2, 382]
    [D:\Program Files\Thunder Network\Thunder\Program\p2p_upload.dll]  [Thunder Networking Technologies,LTD, 1, 1, 2, 8]
    [D:\Program Files\Thunder Network\Thunder\Program\p2p_local_res.dll]  [Thunder Networking Technologies,LTD, 1,1,2,12]
    [D:\Program Files\Thunder Network\Thunder\Program\al.dll]  [Thunder Networking Technologies,LTD, 1,1,2,15]
    [D:\Program Files\Thunder Network\Thunder\Components\InMedia\iEmbedShell.dll]  [　, 1, 0, 2, 25]
    [d:\Program Files\Thunder Network\Thunder\Components\InMedia\iEmbed17.dll]  [Thunder Networking Technologies,LTD, 3, 4, 8, 107]
    [d:\Program Files\Thunder Network\Thunder\Components\InMedia\PlayerHelper.dll]  [thunder, 1, 2, 7, 61]
    [d:\Program Files\Thunder Network\Thunder\Components\InMedia\XLIPC.DLL]  [Thunder Networking Technologies,LTD, 1, 0, 0, 2]
    [D:\Program Files\Thunder Network\Thunder\Components\P4PClient\P4PClient.dll]  [Thunder Networking Technologies,LTD, 2, 2, 5, 70]
    [D:\Program Files\Thunder Network\Thunder\Components\Community\XLCommunity.dll]  [Thunder Networking Technologies,LTD, 2, 4, 0, 77]
    [D:\Program Files\Thunder Network\Thunder\Program\imdt.dll]  [TODO: <Company name>, 1.1.2.5]
    [D:\Program Files\Thunder Network\Thunder\Program\XLNetU.Dll]  [Thunder Networking Technologies,LTD, 1, 5, 1, 24]
    [D:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\ThunderRAV\bin\rsscan.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 4]
    [D:\Program Files\Thunder Network\Thunder\Components\Tips\XLIPC.DLL]  [Thunder Networking Technologies,LTD, 1, 0, 0, 2]
    [D:\Program Files\Thunder Network\Thunder\Program\bd.dll]  [Thunder Networking Technologies,LTD, 1, 0, 2, 17]
[PID: 3760 / ken][E:\0x7c939925      0x04d00000    read\SREngLdr.EXE]  [Smallfrogs Studio, 2.6.12.1018]
[PID: 3732 / ken][E:\0x7c939925      0x04d00000    read\SRE3d08e37b.EXE]  [Smallfrogs Studio, 2.6.12.1018]
    [C:\WINDOWS\system32\SOGOUPY.IME]  [Sogou.com Inc., 3.5.0.0]
    [d:\Program Files\SogouInput\Plugin\SgImeWord.dll]  [Sogou.com Inc., 3.5.0.0]
    [D:\Program Files\sina\UC\UCIdleHook.dll]  [北京新浪信息技术有限公司, 1, 0, 1, 0]
    [E:\0x7c939925      0x04d00000    read\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]

==================================
文件关联
.TXT  Error. [C:\WINDOWS\notepad.exe %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  Error. ["hh.exe" %1]
.HLP  Error. [C:\WINDOWS\winhlp32.exe %1]
.INI  Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
.INF  Error. [C:\WINDOWS\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
N/A

==================================
进程特权扫描
特殊特权被允许： SeLoadDriverPrivilege [PID = 2228, D:\PROGRAM FILES\THUNDER NETWORK\THUNDER\PROGRAM\THUNDER5.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3760, E:\0X7C939925      0X04D00000    READ\SRENGLDR.EXE]

==================================
API HOOK
N/A

==================================
隐藏进程
N/A

==================================


[/CODE]

报告打上来了，麻烦您给看看了啊！

就这个不认识，看你自己了，将文件找来看看吧
==================================
驱动程序
[zinem / zinem][Running/Boot Start]
  <\SystemRoot\system32\drivers\zinem.sys><N/A>