123   2  /  3  页   跳转

弹出www.dt800.com等网站

O2 - BHO: (no name) - RsAutorunsDisabled - (no file)
O2 - BHO: WebThunderBHO - {00000AAA-A363-466E-BEF5-9BB68697AA7F} - C:\Program Files\Thunder Network\WebThunder\WebThunderBHO_015.dll
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - (no file)
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FlashGet\jccatch.dll
O2 - BHO: AlxTB BHO - {F1FABE79-25FC-46de-8C5A-2C6DB9D64333} - C:\WINDOWS\system32\AlxTB2.dll
O3 - Toolbar: (no name) - {6C3797D2-3FEF-4cd4-B654-D3AE55B4128C} - (no file)
O3 - Toolbar: Alexa - {3CEFF6CD-6F08-4e4d-BCCD-FF7415288C3B} - C:\WINDOWS\system32\SHDOCVW.DLL
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [IMSCMig] C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload
O4 - HKLM\..\Run: [StormCodec_Helper] "C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE USB PC Camera 302
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [RfwMain] "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup
O4 - HKLM\..\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: Alexa Web Search - http://client.alexa.com/holiday/script/actions/search.htm
O8 - Extra context menu item: Get Alexa Data - http://client.alexa.com/holiday/script/actions/sitedata.htm
O8 - Extra context menu item: Mail to a Friend... - http://client.alexa.com/holiday/script/actions/mailto.htm
O8 - Extra context menu item: See Related Links - http://client.alexa.com/holiday/script/actions/related.htm
O8 - Extra context menu item: Write a Review... - http://client.alexa.com/holiday/script/actions/review.htm
O8 - Extra context menu item: 上传到QQ网络硬盘 - C:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 使用Web迅雷下载 - C:\Program Files\Thunder Network\WebThunder\GetUrl.htm
O8 - Extra context menu item: 使用Web迅雷下载全部链接 - C:\Program Files\Thunder Network\WebThunder\GetAllUrl.htm
O8 - Extra context menu item: 使用网际快车下载 - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: 使用网际快车下载全部链接 - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: 导出当前页到超星阅览器(&A) - C:\Program Files\SSREADER36\ss_all.htm
O8 - Extra context menu item: 导出选中部分到超星阅览器(&S) - C:\Program Files\SSREADER36\ss_select.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - C:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - C:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - C:\Program Files\Tencent\QQ\SendMMS.htm
O8 - Extra context menu item: 转换为 Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: 转换为现有 PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: 转换选定的链接为 Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: 转换选定的链接为现有 PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: 转换选项为 Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: 转换选项为现有 PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: 转换链接目标为 Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: 转换链接目标为现有 PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: (no name) - RsAutorunsDisabled - (no file)
O9 - Extra button: (no name) - {0062C9BD-B349-40DE-91A0-755F37ACD559} - (no file)
O9 - Extra button: 信息检索 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: 启动Web迅雷 - {962EFB8E-2683-42d4-AC74-AAA4C759B9C6} - http://my.xunlei.com (file missing)
O9 - Extra 'Tools' menuitem: 启动Web迅雷 - {962EFB8E-2683-42d4-AC74-AAA4C759B9C6} - http://my.xunlei.com (file missing)
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - Extra 'Tools' menuitem: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\WINDOWS\system32\shdocvw.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkID=39204
O16 - DPF: {488A4255-3236-44B3-8F27-FA1AECAA8844} (CEditCtrl Object) - https://img.alipay.com/download/1007/aliedit.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?71550818163366
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?71550818127605
O16 - DPF: {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} (AxInputControl Class) - https://mybank.icbc.com.cn/icbc/perbank/AXSafeControls.cab
O16 - DPF: {7FC22A16-79E6-4787-9C96-B6359BB1106D} (DigitalTrafic Control) - http://www.jt.sh.cn/trafficmap/jtj.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{EEDD3DB6-2A08-485A-A7D5-6CAC599A9632}: NameServer = 192.168.1.1
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: RDPSSW32 - Unknown owner - C:\WINDOWS\System32\RDPSSW32.EXE
O23 - Service: Rising Proxy  Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwproxy.exe
O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwsrv.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe
O23 - Service: Rising RealTime Monitor (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe

gototop
 

请帮忙再看一下
gototop
 

上面已经是重扫的日志了
gototop
 

Logfile of HijackThis v1.99.1
Scan saved at 20:32:44, on 2006-12-2
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Rising\Rav\Ravmond.exe
c:\program files\rising\rfw\rfwsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Rising\Rav\RavStub.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\SERVICES.EXE
c:\program files\rising\rfw\RfwMain.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\jmesoft\hotkey.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\VM_STI.EXE
C:\Program Files\Java\j2re1.4.2_12\bin\jusched.exe
C:\Program Files\Rising\Rav\RavTask.exe
C:\Program Files\Rising\Rav\Ravmon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\system32\rdpclip.exe
C:\WINDOWS\explorer.exe
E:\夏小秋\Downloads\HijackThis V1[1].99.1汉化版\HijackThis.exe

F2 - REG:system.ini: UserInit=C:\WINDOWS\SERVICES.EXE,C:\WINDOWS\system32\userinit.exe
O1 - Hosts: 60.190.24.232 dnsc.yahoo.com.cn
O1 - Hosts: 60.190.24.232 www.hao123.com.cn
O1 - Hosts: 60.190.24.232 www.hao123.cn
O1 - Hosts: 60.190.24.232 www.54114.com
O1 - Hosts: 60.190.24.232 www.hiurl.net
O1 - Hosts: 60.190.24.232 www.hiurl.com
O1 - Hosts: 60.190.24.232 www.234567.com
O1 - Hosts: 60.190.24.232 www.fosoho.com
O1 - Hosts: 60.190.24.232 www.hao123.cc
O1 - Hosts: 60.190.24.232 www.baidui.com
O1 - Hosts: 60.190.24.232 www.05335.com
O1 - Hosts: 60.190.24.232 www.265dh.com
O1 - Hosts: 60.190.24.232 www.12384.com
O1 - Hosts: 60.190.24.232 www.yes6688.com
O1 - Hosts: 60.190.24.232 www.mm3721.com
O1 - Hosts: 60.190.24.232 www.tzktv.com
O1 - Hosts: 60.190.24.232 www.56777.com
O1 - Hosts: 60.190.24.232 www.0769cn.com
O1 - Hosts: 60.190.24.232 www.love330.com
O1 - Hosts: 60.190.24.232 www.eyou123.com
O1 - Hosts: 60.190.24.232 www.newbaidu.net
O1 - Hosts: 60.190.24.232 www.zx456.com
O1 - Hosts: 60.190.24.232 www.hao456.net
O1 - Hosts: 60.190.24.232 www.kuai123.com
O1 - Hosts: 60.190.24.232 www.ho123.net
O1 - Hosts: 60.190.24.232 www.nilaicha.com
O1 - Hosts: 60.190.24.232 www.zn138.com
O1 - Hosts: 60.190.24.232 www.happy8.cn
O1 - Hosts: 60.190.24.232 www.haozs.com
O1 - Hosts: 60.190.24.232 www.8wz.cn
O1 - Hosts: 60.190.24.232 8wz.cn
O1 - Hosts: 60.190.24.232 www.ewtj.com
O1 - Hosts: 60.190.24.232 www.hoyido.com
O1 - Hosts: 60.190.24.232 www.ezhtong.com
O1 - Hosts: 60.190.24.232 www.kk369.com
O1 - Hosts: 60.190.24.232 www.917114.com
O1 - Hosts: 60.190.24.232 www.35935.com
O1 - Hosts: 60.190.24.232 www.j186.com
O1 - Hosts: 60.190.24.232 www.go08.com
O1 - Hosts: 60.190.24.232 www.pswz.com
O1 - Hosts: 60.190.24.232 www.21rl.com
O1 - Hosts: 60.190.24.232 play.unionsky.cn
O1 - Hosts: 60.190.24.232 www.topvery.cn
O1 - Hosts: 60.190.24.232 www.maletx.com
O1 - Hosts: 60.190.24.232 www.369go.net
O1 - Hosts: 60.190.24.232 www.hao1.com
O1 - Hosts: 60.190.24.232 www.jnwlt.com
O1 - Hosts: 60.190.24.232 www.u369.com
O1 - Hosts: 60.190.24.232 www.fj568.com
O1 - Hosts: 60.190.24.232 www.hs23.com
O1 - Hosts: 60.190.24.232 www.e6t.cn
O1 - Hosts: 60.190.24.232 www.luck68.com
O1 - Hosts: 60.190.24.232 www.ok321.com
O1 - Hosts: 60.190.24.232 www.go5135.com
O1 - Hosts: 60.190.24.232 www.bl366.com
O1 - Hosts: 60.190.24.232 www.169go.com
O1 - Hosts: 60.190.24.232 www.yhjm.com
O1 - Hosts: 60.190.24.232 www.so2008.com
O1 - Hosts: 60.190.24.232 www.k366.com
O1 - Hosts: 60.190.24.232 www.jsing.net
O1 - Hosts: 60.190.24.232 www.gjj.cc
O1 - Hosts: 60.190.24.232 www.web888.org
O1 - Hosts: 60.190.24.232 www.pkpkpk.net
O1 - Hosts: 60.190.24.232 www.jsing.net
O1 - Hosts: 60.190.24.232 abc.265.com
O1 - Hosts: 60.190.24.232 265.com
O1 - Hosts: 60.190.24.232 www.265.com
O1 - Hosts: 60.190.24.232 hao123.com
O1 - Hosts: 60.190.24.232 www.hao123.com
O1 - Hosts: 60.190.24.232 9991.com
O1 - Hosts: 60.190.24.232 www.9991.com
O1 - Hosts: 60.190.24.232 gjj.cc
O1 - Hosts: 60.190.24.232 5566.net
O1 - Hosts: 60.190.24.232 www.5566.net
O1 - Hosts: 60.190.24.232 qu123.com
O1 - Hosts: 60.190.24.232 www.qu123.com
O1 - Hosts: 60.190.24.232 855.com
O1 - Hosts: 60.190.24.232 www.855.com
O1 - Hosts: 60.190.24.232 7b.com.cn
O1 - Hosts: 60.190.24.232 www.7b.com.cn
O1 - Hosts: 60.190.24.232 ppgou.com
O1 - Hosts: 60.190.24.232 www.ppgou.com
O1 - Hosts: 60.190.24.232 v111.com
O1 - Hosts: 60.190.24.232 www.v111.com
O1 - Hosts: 60.190.24.232 xp13.com
O1 - Hosts: 60.190.24.232 www.xp13.com
O1 - Hosts: 60.190.24.232 521521.com
O1 - Hosts: 60.190.24.232 www.521521.com
O1 - Hosts: 60.190.24.232 19ku.com
O1 - Hosts: 60.190.24.232 www.19ku.com
O1 - Hosts: 60.190.24.232 37021.com
O1 - Hosts: 60.190.24.232 www.37021.com
O1 - Hosts: 60.190.24.232 da123.com
O1 - Hosts: 60.190.24.232 www.da123.com
O1 - Hosts: 60.190.24.232 x05.net
O1 - Hosts: 60.190.24.232 www.x05.net
O1 - Hosts: 60.190.24.232 www.acnow.net
O1 - Hosts: 60.190.24.232 acnow.net
O1 - Hosts: 60.190.24.232 www.114.com.cn
O1 - Hosts: 60.190.24.232 114.com.cn
O1 - Hosts: 60.190.24.232 www.jjol.cn
gototop
 

O2 - BHO: (no name) - RsAutorunsDisabled - (no file)
O2 - BHO: WebThunderBHO - {00000AAA-A363-466E-BEF5-9BB68697AA7F} - C:\Program Files\Thunder Network\WebThunder\WebThunderBHO_015.dll
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - (no file)
O2 - BHO: IENameHandler - {30EBA2E2-58B2-4980-9C41-F12F5F1422C5} - C:\WINDOWS\system32\tpHandle.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FlashGet\jccatch.dll
O2 - BHO: (no name) - {AE7CD045-E861-484f-8273-0445EE161910} - (no file)
O2 - BHO: AlxTB BHO - {F1FABE79-25FC-46de-8C5A-2C6DB9D64333} - C:\WINDOWS\system32\AlxTB2.dll
O3 - Toolbar: Alexa - {3CEFF6CD-6F08-4e4d-BCCD-FF7415288C3B} - C:\WINDOWS\system32\SHDOCVW.DLL
O3 - Toolbar: (no name) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - (no file)
O3 - Toolbar: (no name) - {6C3797D2-3FEF-4cd4-B654-D3AE55B4128C} - (no file)
O3 - Toolbar: BitComet工具栏 - {3F1ABCDB-A875-46c1-8345-B72A4567E486} - C:\Program Files\BitComet\BitCometBar\BitCometBar0.6.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [jmekey] C:\Program Files\jmesoft\hotkey.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE USB PC Camera 302
O4 - HKLM\..\Run: [DAEMON Tools-2052] "C:\Program Files\D-Tools\daemon.exe" -lang 1033 -noicon
O4 - HKLM\..\Run: [IMSCMig] C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload
O4 - HKLM\..\Run: [StormCodec_Helper] "C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_12\bin\jusched.exe
O4 - HKLM\..\Run: [RfwMain] "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup
O4 - HKLM\..\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: Alexa Web Search - http://client.alexa.com/holiday/script/actions/search.htm
O8 - Extra context menu item: Get Alexa Data - http://client.alexa.com/holiday/script/actions/sitedata.htm
O8 - Extra context menu item: Mail to a Friend... - http://client.alexa.com/holiday/script/actions/mailto.htm
O8 - Extra context menu item: See Related Links - http://client.alexa.com/holiday/script/actions/related.htm
O8 - Extra context menu item: Write a Review... - http://client.alexa.com/holiday/script/actions/review.htm
O8 - Extra context menu item: 上传到QQ网络硬盘 - C:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 使用Web迅雷下载 - C:\Program Files\Thunder Network\WebThunder\GetUrl.htm
O8 - Extra context menu item: 使用Web迅雷下载全部链接 - C:\Program Files\Thunder Network\WebThunder\GetAllUrl.htm
O8 - Extra context menu item: 使用网际快车下载 - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: 使用网际快车下载全部链接 - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: 导出当前页到超星阅览器(&A) - C:\Program Files\SSREADER36\ss_all.htm
O8 - Extra context menu item: 导出选中部分到超星阅览器(&S) - C:\Program Files\SSREADER36\ss_select.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - C:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - C:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - C:\Program Files\Tencent\QQ\SendMMS.htm
O8 - Extra context menu item: 转换为 Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: 转换为现有 PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: 转换选定的链接为 Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: 转换选定的链接为现有 PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: 转换选项为 Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: 转换选项为现有 PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: 转换链接目标为 Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: 转换链接目标为现有 PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: (no name) - RsAutorunsDisabled - (no file)
O9 - Extra button: 信息检索 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: 启动Web迅雷 - {962EFB8E-2683-42d4-AC74-AAA4C759B9C6} - http://my.xunlei.com (file missing)
O9 - Extra 'Tools' menuitem: 启动Web迅雷 - {962EFB8E-2683-42d4-AC74-AAA4C759B9C6} - http://my.xunlei.com (file missing)
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - Extra 'Tools' menuitem: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - (no file)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - (no file)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1155471996720
O16 - DPF: {7FC22A16-79E6-4787-9C96-B6359BB1106D} (DigitalTrafic Control) - http://www.jt.sh.cn/trafficmap/jtj.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{917FD1E9-2206-4022-9468-2E2486BD3B34}: NameServer = 192.168.1.1
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: Rising Proxy  Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwproxy.exe
O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwsrv.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe
O23 - Service: Rising RealTime Monitor (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe
gototop
 

2006-12-02,20:31:52

System Repair Engineer 2.2.6.605
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中:
    所有的启动项目(包括注册表、启动文件夹、服务等)
    浏览器加载项
    正在运行的进程(包括进程模块信息)
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [(Verified)Microsoft Corporation]
    <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [(Verified)Microsoft Corporation]
    <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [(Verified)Microsoft Corporation]
    <IgfxTray><C:\WINDOWS\system32\igfxtray.exe>  [(Verified)Intel Corporation]
    <HotKeysCmds><C:\WINDOWS\system32\hkcmd.exe>  [(Verified)Intel Corporation]
    <jmekey><C:\Program Files\jmesoft\hotkey.exe>  [JME Co., Ltd.]
    <SoundMan><SOUNDMAN.EXE>  [(Verified)Realtek Semiconductor Corp.]
    <BigDogPath><C:\WINDOWS\VM_STI.EXE USB PC Camera 302>  [N/A]
    <DAEMON Tools-2052><"C:\Program Files\D-Tools\daemon.exe" -lang 1033 -noicon>  [DAEMON'S HOME]
    <IMSCMig><C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload>  [(Verified)Microsoft Corporation]
    <StormCodec_Helper><"C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti>  [N/A]
    <SunJavaUpdateSched><C:\Program Files\Java\j2re1.4.2_12\bin\jusched.exe>  [N/A]
    <RfwMain><"C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup>  [Beijing Rising Technology Co., Ltd.]
    <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system>  [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Corporation]
    <Userinit><C:\WINDOWS\SERVICES.EXE,C:\WINDOWS\system32\userinit.exe>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll>  [Beijing Rising Technology Co., Ltd.]

==================================
启动文件夹
N/A

==================================
服务
[Human Interface Device Access / HidServ]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[Intel NCS NetService / NetSvc]
  <C:\Program Files\Intel\NCS\Sync\NetSvc.exe><Intel(R) Corporation>
[Rising Proxy  Service / RfwProxySrv]
  <c:\program files\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.>
[Rising Personal Firewall Service / RfwService]
  <c:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.>
[Rising Process Communication Center / RsCCenter]
  <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[Rising RealTime Monitor / RsRavMon]
  <"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[Visual Studio Analyzer RPC bridge / Visual Studio Analyzer RPC bridge]
  <C:\Program Files\Microsoft Visual Studio\Common\Tools\VS-Ent98\Vanalyzr\varpc.exe><Microsoft Corporation>

==================================
gototop
 

驱动程序
[Service for Realtek AC97 Audio (WDM) / ALCXWDM]
  <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
[Rising TDI Base Driver / BaseTDI]
  <System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.>
[Cdsys / Cdsys]
  <\??\C:\WINDOWS\system32\cdcd.sys><N/A>
[d347bus / d347bus]
  <\SystemRoot\system32\DRIVERS\d347bus.sys><>
[d347prt / d347prt]
  <\SystemRoot\System32\Drivers\d347prt.sys><>
[Intel(R) PRO Adapter Driver / E100B]
  <system32\DRIVERS\e100b325.sys><Intel Corporation>
[EagleNT / EagleNT]
  <\??\C:\WINDOWS\system32\drivers\EagleNT.sys><N/A>
[ExpScaner / ExpScaner]
  <\??\C:\Program Files\Rising\Rav\ExpScan.sys><>
[HookCont / HookCont]
  <\??\C:\Program Files\Rising\Rav\HOOKCONT.sys><Rising tech Co. ltd>
[HookReg / HookReg]
  <\??\C:\Program Files\Rising\Rav\HookReg.sys><>
[HookSys / HookSys]
  <\??\C:\Program Files\Rising\Rav\HookSys.sys><Rising>
[HookUrl / HookUrl]
  <\??\C:\Program Files\Rising\Rfw\HookUrl.sys><Beijing Rising Technology Co., Ltd.>
[ialm / ialm]
  <system32\DRIVERS\ialmnt5.sys><Intel Corporation>
[IdeBusDr / IdeBusDr]
  <\SystemRoot\system32\DRIVERS\IdeBusDr.sys><Intel Corporation>
[Intel(R) Ultra ATA Controller / IdeChnDr]
  <\SystemRoot\system32\DRIVERS\IdeChnDr.sys><Intel Corporation>
[IntelC51 / IntelC51]
  <system32\DRIVERS\IntelC51.sys><Intel Corporation>
[IntelC52 / IntelC52]
  <system32\DRIVERS\IntelC52.sys><Intel Corporation>
[IntelC53 / IntelC53]
  <system32\DRIVERS\IntelC53.sys><Intel Corporation>
[MEMSCAN / MEMSCAN]
  <\??\C:\Program Files\Rising\Rav\MEMSCAN.sys><瑞星软件有限公司>
[mohfilt / mohfilt]
  <system32\DRIVERS\mohfilt.sys><Intel Corporation>
[mProcRs / mProcRs]
  <\??\c:\program files\rising\rfw\mProcRs.sys><Beijing Rising Technology Co., Ltd.>
[Nal Service  / NAL]
  <\??\C:\WINDOWS\system32\Drivers\iqvw32.sys><Intel Corporation>
[npkcrypt / npkcrypt]
  <\??\C:\Program Files\Tencent\QQ\npkcrypt.sys><INCA Internet Co., Ltd.>
[Direct Parallel Link Driver / Ptilink]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[RsFwDrv / RsFwDrv]
  <\??\C:\Program Files\Rising\Rfw\RsFwDrv.sys><Beijing Rising Technology Co., Ltd.>
[RSPPSYS / RSPPSYS]
  <\??\C:\Program Files\Rising\Rav\RSPPSYS.sys><Rising>
[Secdrv / Secdrv]
  <system32\DRIVERS\secdrv.sys><N/A>
[TCP/IP Protocol Driver / Tcpip]
  <system32\DRIVERS\tcpip.sys><Microsoft Corporation>

==================================
浏览器加载项
[WebThunder Browser Helper]
  {00000AAA-A363-466E-BEF5-9BB68697AA7F} <C:\Program Files\Thunder Network\WebThunder\WebThunderBHO_015.dll, Thunder Networking Technologies,LTD>
[IEHandle Class]
  {30EBA2E2-58B2-4980-9C41-F12F5F1422C5} <C:\WINDOWS\system32\tpHandle.dll, 江苏科建教育软件有限责任公司>
[IeCatch2 Class]
  {A5366673-E8CA-11D3-9CD9-0090271D075B} <C:\PROGRA~1\FlashGet\jccatch.dll, Amaze Soft>
[AlxTB BHO Class]
  {F1FABE79-25FC-46de-8C5A-2C6DB9D64333} <C:\WINDOWS\system32\AlxTB2.dll, Alexa Internet>
[信息检索(&R)]
  {92780B25-18CC-41C8-B9BE-3C9C571A8263} <C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL, Microsoft Corporation>
[启动Web迅雷]
  {962EFB8E-2683-42d4-AC74-AAA4C759B9C6} <http://my.xunlei.com, N/A>
[@shdoclc.dll,-866]
  {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <C:\Program Files\Tencent\QQ\QQ.EXE, TENCENT>
[FlashGet]
  {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <C:\PROGRA~1\FlashGet\flashget.exe, Amaze Soft>
[QQIEFloatBarCfgCmd Class]
  {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[Messenger]
  {FB5F1910-F110-11d2-BB9E-00C04F795683} <, N/A>
[Alexa]
  {3CEFF6CD-6F08-4e4d-BCCD-FF7415288C3B} <C:\WINDOWS\system32\SHDOCVW.DLL, Microsoft Corporation>
[BitComet工具栏]
  {3F1ABCDB-A875-46c1-8345-B72A4567E486} <C:\Program Files\BitComet\BitCometBar\BitCometBar0.6.dll, N/A>
[FlashGet Bar]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\FlashGet\fgiebar.dll, Amaze Soft>
[WUWebControl Class]
  {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation>
[DigitalTrafic Control]
  {7FC22A16-79E6-4787-9C96-B6359BB1106D} <C:\WINDOWS\DOWNLO~1\DIGITA~1.OCX, Broad-way>
[Java Plug-in 1.4.2_12]
  {8AD9C840-044E-11D1-B3E9-00805F499D93} <C:\Program Files\Java\j2re1.4.2_12\bin\npjpi142_12.dll, JavaSoft / Sun Microsystems, Inc.>
[Java Plug-in 1.4.2_12]
  {CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA} <C:\Program Files\Java\j2re1.4.2_12\bin\npjpi142_12.dll, JavaSoft / Sun Microsystems, Inc.>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[WebThunder Browser Helper]
  {00000AAA-A363-466E-BEF5-9BB68697AA7F} <C:\Program Files\Thunder Network\WebThunder\WebThunderBHO_015.dll, Thunder Networking Technologies,LTD>
[Web Browser Applet Control]
  {08B0E5C0-4FCB-11CF-AAA5-00401C608501} <C:\WINDOWS\system32\msjava.dll, Microsoft Corporation>
[Windows Media Player]
  {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[HTML Document]
  {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
[Menu Class]
  {27D784D7-9217-4227-B43B-E06E4781E0CB} <C:\WINDOWS\system32\AlxTB2.dll, Alexa Internet>
[IEHandle Class]
  {30EBA2E2-58B2-4980-9C41-F12F5F1422C5} <C:\WINDOWS\system32\tpHandle.dll, 江苏科建教育软件有限责任公司>
[Alexa]
  {3CEFF6CD-6F08-4E4D-BCCD-FF7415288C3B} <C:\WINDOWS\system32\SHDOCVW.DLL, Microsoft Corporation>
[BitComet工具栏]
  {3F1ABCDB-A875-46C1-8345-B72A4567E486} <C:\Program Files\BitComet\BitCometBar\BitCometBar0.6.dll, N/A>
[Shell Name Space]
  {55136805-B2DE-11D1-B9F2-00A0C98BC547} <%SystemRoot%\system32\shdocvw.dll, N/A>
[BrowserProxy4 Class]
  {69A72A8A-84ED-4A75-8CE7-263DBEF3E5D3} <C:\WINDOWS\system32\AlxTB2.dll, Alexa Internet>
[Windows Media Player]
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[DigitalTrafic Control]
  {7FC22A16-79E6-4787-9C96-B6359BB1106D} <C:\WINDOWS\DOWNLO~1\DIGITA~1.OCX, Broad-way>
[Microsoft Web 浏览器]
  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[IeCatch2 Class]
  {A5366673-E8CA-11D3-9CD9-0090271D075B} <C:\PROGRA~1\FlashGet\jccatch.dll, Amaze Soft>
[SearchAssistantOC]
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[RDS.DataSpace]
  {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\system\msadc\msadco.dll, Microsoft Corporation>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[FlashGet Bar]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\FlashGet\fgiebar.dll, Amaze Soft>
[AlxTB BHO Class]
  {F1FABE79-25FC-46DE-8C5A-2C6DB9D64333} <C:\WINDOWS\system32\AlxTB2.dll, Alexa Internet>
[Alexa Web Search]
  <http://client.alexa.com/holiday/script/actions/search.htm, N/A>
[Get Alexa Data]
  <http://client.alexa.com/holiday/script/actions/sitedata.htm, N/A>
[Mail to a Friend...]
  <http://client.alexa.com/holiday/script/actions/mailto.htm, N/A>
[See Related Links]
  <http://client.alexa.com/holiday/script/actions/related.htm, N/A>
[Write a Review...]
  <http://client.alexa.com/holiday/script/actions/review.htm, N/A>
[上传到QQ网络硬盘]
  <C:\Program Files\Tencent\QQ\AddToNetDisk.htm, N/A>
[使用Web迅雷下载]
  <C:\Program Files\Thunder Network\WebThunder\GetUrl.htm, N/A>
[使用Web迅雷下载全部链接]
  <C:\Program Files\Thunder Network\WebThunder\GetAllUrl.htm, N/A>
[使用网际快车下载]
  <C:\Program Files\FlashGet\jc_link.htm, N/A>
[使用网际快车下载全部链接]
  <C:\Program Files\FlashGet\jc_all.htm, N/A>
[导出到 Microsoft Office Excel(&X)]
  <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
[导出当前页到超星阅览器(&A)]
  <C:\Program Files\SSREADER36\ss_all.htm, N/A>
[导出选中部分到超星阅览器(&S)]
  <C:\Program Files\SSREADER36\ss_select.htm, N/A>
[添加到QQ自定义面板]
  <C:\Program Files\Tencent\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
  <C:\Program Files\Tencent\QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <C:\Program Files\Tencent\QQ\SendMMS.htm, N/A>
[转换为 Adobe PDF]
  <res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html, N/A>
[转换为现有 PDF]
  <res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html, N/A>
[转换选定的链接为 Adobe PDF]
  <res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html, N/A>
[转换选定的链接为现有 PDF]
  <res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html, N/A>
[转换选项为 Adobe PDF]
  <res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html, N/A>
[转换选项为现有 PDF]
  <res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html, N/A>
[转换链接目标为 Adobe PDF]
  <res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html, N/A>
[转换链接目标为现有 PDF]
  <res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html, N/A>

==================================
gototop
 

正在运行的进程
[PID: 644][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 708][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 736][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 784][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 796][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 948][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1028][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1112][C:\Program Files\Rising\Rav\CCenter.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3]
[PID: 1132][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1188][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1252][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1344][C:\Program Files\Rising\Rav\Ravmond.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 1, 47]
    [C:\Program Files\Rising\Rav\BWList.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Rising\Rav\RsPPsys.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3]
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\Program Files\Rising\Rav\RsLog.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20]
    [C:\Program Files\Rising\Rav\HOOKSYS.dll]  [Beijing Rising Technology Co., Ltd., 18, 1, 0, 12]
    [C:\Program Files\Rising\Rav\Scanner.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 33]
    [C:\Program Files\Rising\Rav\libload.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 10]
    [C:\Program Files\Rising\Rav\VirusLib.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
    [C:\Program Files\Rising\Rav\regmon.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6]
    [C:\Program Files\Rising\Rav\HookWeb.dll]  [rising, 18, 0, 0, 2]
    [C:\Program Files\Rising\Rav\MemMon.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 12]
    [C:\Program Files\Rising\Rav\expscan.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\Program Files\Rising\Rav\mPorts.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3]
    [C:\Program Files\Rising\Rav\MailMon.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
    [C:\Program Files\Rising\Rav\SpamEng.dll]  [N/A, 18, 0, 0, 6]
    [C:\Program Files\Rising\Rav\engine.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 35]
    [C:\Program Files\Rising\Rav\PostTrt.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 18]
    [C:\Program Files\Rising\Rav\UnExe.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11]
    [C:\Program Files\Rising\Rav\ScanExec.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 16]
    [C:\Program Files\Rising\Rav\ScanEx.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 34]
    [C:\Program Files\Rising\Rav\RSUnpack.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 21]
    [C:\Program Files\Rising\Rav\ExtFile.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 24]
    [C:\Program Files\Rising\Rav\NvFile.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 7]
    [C:\Program Files\Rising\Rav\ScanMac.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 10]
    [C:\Program Files\Rising\Rav\ScanSct.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20]
    [C:\Program Files\Rising\Rav\Unpacker.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 7]
[PID: 1476][c:\program files\rising\rfw\rfwsrv.exe]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 33]
    [c:\program files\rising\rfw\RfwRule.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 13]
    [c:\program files\rising\rfw\rfwlog.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 6]
    [c:\program files\rising\rfw\Rfwdrv.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 21]
    [c:\program files\rising\rfw\MonDrv.dll]  [rs, 1, 0, 0, 4]
    [c:\program files\rising\rfw\ProcLib.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 9]
[PID: 1596][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
    [C:\WINDOWS\system32\AdobePDF.dll]  [Adobe Systems Incorporated., 7.0.0.00]
    [C:\Program Files\Adobe\Acrobat 7.0\Distillr\AdistRes.CHS]  [N/A, N/A]
[PID: 1692][C:\Program Files\Rising\Rav\RavStub.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 16]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[PID: 1840][C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE]  [Microsoft Corporation, 7.00.9466]
[PID: 1928][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2000][C:\WINDOWS\system32\wdfmgr.exe]  [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
[PID: 500][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 476][C:\WINDOWS\SERVICES.EXE]  [N/A, 1.00]
    [C:\Program Files\jmesoft\KeyHook.DLL]  [N/A, N/A]
[PID: 1332][c:\program files\rising\rfw\RfwMain.exe]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 52]
    [c:\program files\rising\rfw\RsGuiLib.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 23]
    [c:\program files\rising\rfw\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [c:\program files\rising\rfw\PngDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
[PID: 1196][C:\WINDOWS\system32\hkcmd.exe]  [Intel Corporation, 3.0.0.3762]
    [C:\WINDOWS\system32\hccutils.DLL]  [Intel Corporation, 3.0.0.3762]
    [C:\WINDOWS\system32\igfxdev.dll]  [Intel Corporation, 3.0.0.3762]
    [C:\WINDOWS\system32\igfxsrvc.dll]  [Intel Corporation, 3.0.0.3762]
    [C:\WINDOWS\system32\igfxres.dll]  [Intel Corporation, 3.0.0.3762]
    [C:\WINDOWS\system32\igfxhk.dll]  [Intel Corporation, 3.0.0.3762]
[PID: 1180][C:\Program Files\jmesoft\hotkey.exe]  [JME Co., Ltd., 2.2.0.321]
    [C:\Program Files\jmesoft\KeyHook.DLL]  [N/A, N/A]
[PID: 1184][C:\WINDOWS\SOUNDMAN.EXE]  [Realtek Semiconductor Corp., 5, 1, 0, 51]
[PID: 1156][C:\WINDOWS\VM_STI.EXE]  [VM., 4.2.610.4]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
[PID: 1444][C:\Program Files\Java\j2re1.4.2_12\bin\jusched.exe]  [N/A, N/A]
[PID: 1400][C:\Program Files\Rising\Rav\RavTask.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 22]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
[PID: 1880][C:\Program Files\Rising\Rav\Ravmon.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 1, 39]
    [C:\Program Files\Rising\Rav\RsGuiLib.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 26]
    [C:\Program Files\Rising\Rav\BWList.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20]
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Rising\Rav\PngDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
[PID: 2036][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2164][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2380][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Thunder Network\WebThunder\WebThunderBHO_015.dll]  [Thunder Networking Technologies,LTD, 6, 0, 0, 5]
    [C:\WINDOWS\system32\tpHandle.dll]  [江苏科建教育软件有限责任公司, 3, 5, 8, 6]
    [C:\PROGRA~1\FlashGet\jccatch.dll]  [Amaze Soft, 1, 1, 4, 0]
    [C:\WINDOWS\system32\AlxTB2.dll]  [Alexa Internet, 7, 2, 0, 2]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\Program Files\jmesoft\KeyHook.DLL]  [N/A, N/A]
[PID: 2512][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2220][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2912][C:\WINDOWS\system32\logonui.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2788][C:\WINDOWS\system32\rdpclip.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 3084][C:\WINDOWS\explorer.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll]  [Adobe Systems, Inc., 7.0.0.0]
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.CHS]  [Adobe Systems, Inc., 7.0.0.0]
    [C:\WINDOWS\system32\igfxpph.dll]  [Intel Corporation, 3.0.0.3762]
    [C:\WINDOWS\system32\hccutils.DLL]  [Intel Corporation, 3.0.0.3762]
    [C:\WINDOWS\system32\igfxres.dll]  [Intel Corporation, 3.0.0.3762]
    [C:\WINDOWS\system32\igfxsrvc.dll]  [Intel Corporation, 3.0.0.3762]
    [C:\WINDOWS\system32\igfxdev.dll]  [Intel Corporation, 3.0.0.3762]
    [C:\Program Files\Thunder Network\WebThunder\WebThunderBHO_015.dll]  [Thunder Networking Technologies,LTD, 6, 0, 0, 5]
    [C:\WINDOWS\system32\tpHandle.dll]  [江苏科建教育软件有限责任公司, 3, 5, 8, 6]
    [C:\PROGRA~1\FlashGet\jccatch.dll]  [Amaze Soft, 1, 1, 4, 0]
    [C:\WINDOWS\system32\AlxTB2.dll]  [Alexa Internet, 7, 2, 0, 2]
    [C:\WINDOWS\system32\RavExt.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 21]
[PID: 3244][E:\夏小秋\Downloads\sreng最新版\SREng\SREng.exe]  [Smallfrogs Studio, 2.2.6.605]

==================================
gototop
 

文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost
60.190.24.232      dnsc.yahoo.com.cn
60.190.24.232      www.hao123.com.cn
60.190.24.232      www.hao123.cn
60.190.24.232      www.54114.com
60.190.24.232      www.hiurl.net
60.190.24.232      www.hiurl.com
60.190.24.232      www.234567.com
60.190.24.232      www.fosoho.com
60.190.24.232      www.hao123.cc
60.190.24.232      www.baidui.com
60.190.24.232      www.05335.com
60.190.24.232      www.265dh.com
60.190.24.232      www.12384.com
60.190.24.232      www.yes6688.com
60.190.24.232      www.mm3721.com
60.190.24.232      www.tzktv.com
60.190.24.232      www.56777.com
60.190.24.232      www.0769cn.com
60.190.24.232      www.love330.com
60.190.24.232      www.eyou123.com
60.190.24.232      www.newbaidu.net
60.190.24.232      www.zx456.com
60.190.24.232      www.hao456.net
60.190.24.232      www.kuai123.com
60.190.24.232      www.ho123.net
60.190.24.232      www.nilaicha.com
60.190.24.232      www.zn138.com
60.190.24.232      www.happy8.cn
60.190.24.232      www.haozs.com
60.190.24.232      www.8wz.cn
60.190.24.232      8wz.cn
60.190.24.232      www.ewtj.com
60.190.24.232      www.hoyido.com
60.190.24.232      www.ezhtong.com
60.190.24.232      www.kk369.com
60.190.24.232      www.917114.com
60.190.24.232      www.35935.com
60.190.24.232      www.j186.com
60.190.24.232      www.go08.com
60.190.24.232      www.pswz.com
60.190.24.232      www.21rl.com
60.190.24.232      play.unionsky.cn
60.190.24.232      www.topvery.cn
60.190.24.232      www.maletx.com
60.190.24.232      www.369go.net
60.190.24.232      www.hao1.com
60.190.24.232      www.jnwlt.com
60.190.24.232      www.u369.com
60.190.24.232      www.fj568.com
60.190.24.232      www.hs23.com
60.190.24.232      www.e6t.cn
60.190.24.232      www.luck68.com
60.190.24.232      www.ok321.com
60.190.24.232      www.go5135.com
60.190.24.232      www.bl366.com
60.190.24.232      www.169go.com
60.190.24.232      www.yhjm.com
60.190.24.232      www.so2008.com
60.190.24.232      www.k366.com
60.190.24.232      www.jsing.net
60.190.24.232      www.gjj.cc
60.190.24.232      www.web888.org
60.190.24.232      www.pkpkpk.net
60.190.24.232      www.jsing.net
60.190.24.232      abc.265.com
60.190.24.232      265.com
60.190.24.232      www.265.com
60.190.24.232      hao123.com
60.190.24.232      www.hao123.com
60.190.24.232      9991.com
60.190.24.232      www.9991.com
60.190.24.232      gjj.cc
60.190.24.232      5566.net
60.190.24.232      www.5566.net
60.190.24.232      qu123.com
60.190.24.232      www.qu123.com
60.190.24.232      855.com
60.190.24.232      www.855.com
60.190.24.232      7b.com.cn
60.190.24.232      www.7b.com.cn
60.190.24.232      ppgou.com
60.190.24.232      www.ppgou.com
60.190.24.232      v111.com
60.190.24.232      www.v111.com
60.190.24.232      xp13.com
60.190.24.232      www.xp13.com
60.190.24.232      521521.com
60.190.24.232      www.521521.com
60.190.24.232      19ku.com
60.190.24.232      www.19ku.com
60.190.24.232      37021.com
60.190.24.232      www.37021.com
60.190.24.232      da123.com
60.190.24.232      www.da123.com
60.190.24.232      x05.net
60.190.24.232      www.x05.net
60.190.24.232      www.acnow.net
60.190.24.232      acnow.net
60.190.24.232      www.114.com.cn
60.190.24.232      114.com.cn
60.190.24.232      www.jjol.cn
60.190.24.232      jjol.cn
60.190.24.232      www.k369.com
60.190.24.232      k369.com
60.190.24.232      www.guang.org
60.190.24.232      guang.org
60.190.24.232      www.wu123.com
60.190.24.232      wu123.com
60.190.24.232      www.haodx.com
60.190.24.232      haodx.com
60.190.24.232      www.v23.com
60.190.24.232      v23.com
60.190.24.232      www.258.com
60.190.24.232      258.com
60.190.24.232      www.haourl.com
60.190.24.232      haourl.com
60.190.24.232      www.baimin.com
60.190.24.232      baimin.com
60.190.24.232      www.hao123.net
60.190.24.232      hao123.net
60.190.24.232      www.32363.com
60.190.24.232      32363.com
60.190.24.232      www.zhao114.com
60.190.24.232      zhao114.com
60.190.24.232      www.51735.com
60.190.24.232      51735.com
60.190.24.232      www.2791.com
60.190.24.232      2791.com
60.190.24.232      wz.qiandu.com
60.190.24.232      www.qiandu.com
60.190.24.232      qiandu.com
60.190.24.232      www.516.com
60.190.24.232      516.com
60.190.24.232      www.9yy.com
60.190.24.232      9yy.com
60.190.24.232      link.nww.cn
60.190.24.232      www.51735.com
60.190.24.232      www.987654.com
60.190.24.232      www.qqwz.com
60.190.24.232      qqwz.com
60.190.24.232      www.kuhuo.com
60.190.24.232      kuhuo.com
60.190.24.232      www.5ni.com
60.190.24.232      5ni.com
60.190.24.232      www.200.net
60.190.24.232      200.net
60.190.24.232      www.tthao.com
60.190.24.232      tthao.com
60.190.24.232      www.hao2008.net
60.190.24.232      hao2008.net
60.190.24.232      www.3tom.com
60.190.24.232      3tom.com
60.190.24.232      www.hen58.com
60.190.24.232      hen58.com
60.190.24.232      www.kan123.com
60.190.24.232      kan123.com
60.190.24.232      www.cnww.net
60.190.24.232      cnww.net
60.190.24.232      www.keyrun.com
60.190.24.232      keyrun.com
60.190.24.232      www.haosf.com
60.190.24.232      haosf.com
60.190.24.232      auto.search.msn.com
60.190.24.232      ld123.com
60.190.24.232      www.ld123.com
60.190.24.232      www.cxdian.com
60.190.24.232      cxdian.com
60.190.24.232      www.bannerbox.com
60.190.24.232      www.kuaiso.com
60.190.24.232      kuaiso.com
60.190.24.232      www.77xx.cn
60.190.24.232      77xx.cn
60.190.24.232      www.z163.com
60.190.24.232      z163.com
60.190.24.232      www.11990.com
60.190.24.232      11990.com
60.190.24.232      www.553300.com
60.190.24.232      553300.com
60.190.24.232      hao220.com
60.190.24.232      www.hao220.com
60.190.24.232      24k.cn
60.190.24.232      www.24k.cn
60.190.24.232      wx.17sky.com
60.190.24.232      www.qingyun.com
60.190.24.232      qingyun.com
60.190.24.232      www.bookhome.net
60.190.24.232      bookhome.net
60.190.24.232      www.an98.com
60.190.24.232      an98.com
60.190.24.232      www.kksk.net
60.190.24.232      kksk.net
60.190.24.232      www.3654.cn
60.190.24.232      3654.cn
60.190.24.232      www.gaibang.com.cn
60.190.24.232      gaibang.com.cn
60.190.24.232      www.xx419.info
60.190.24.232      xx419.info
60.190.24.232      99bb.whoys.com
60.190.24.232      www.b2nai.com
60.190.24.232      hal8.com
60.190.24.232      www.hal8.com
60.190.24.232      www.wr77.com
60.190.24.232      wr77.com
60.190.24.232      591my.com
60.190.24.232      www.softce.com
60.190.24.232      softce.com
60.190.24.232      www.2586.us
60.190.24.232      2586.us
60.190.24.232      yzdh.liveadulthost.com
60.190.24.232      www.sese263.com
60.190.24.232      sese263.com
60.190.24.232      www.hhyule.com
60.190.24.232      hhyule.com
60.190.24.232      www.caonxm.com
60.190.24.232      caonxm.com
60.190.24.232      www.9333.net
60.190.24.232      9333.net
60.190.24.232      www.77xw.us
60.190.24.232      77xw.us
60.190.24.232      sejiebbs.com
60.190.24.232      www.happymm8.com
60.190.24.232      happymm8.com
60.190.24.232      www.21co.net
60.190.24.232      21co.net
60.190.24.232      pplay.be
60.190.24.232      44lian.net
60.190.24.232      www.dy767.com
60.190.24.232      www.haosexke.com
60.190.24.232      www.59552.com
60.190.24.232      www.gg89.com
60.190.24.232      a104x.com
60.190.24.232      www.3xbbs.com
60.190.24.232      www.palacemoon.com
60.190.24.232      www.03mm.net
60.190.24.232      www.tu7.com
60.190.24.232      www.fczr.biz
60.190.24.232      www.book123.biz
60.190.24.232      www.yinnv.com
60.190.24.232      www.sq365.us
60.190.24.232      www.hal8.com
60.190.24.232      www.xvlink.com
60.190.24.232      link.81nc.com
60.190.24.232      www.day999.com
60.190.24.232      w1.7clink.com
60.190.24.232      new.51link.com
60.190.24.232      www.51link.com
60.190.24.232      www.sexmouse.com
60.190.24.232      laoboke.com
60.190.24.232      www.laoboke.com
60.190.24.232      book.seymonk.com
60.190.24.232      www.seymonk.com
60.190.24.232      www.hk-dog.com
60.190.24.232      hk-dog.com
gototop
 

60.190.24.232      www.899188.com
60.190.24.232      gs-discuss.com
60.190.24.232      www.126kk.com
60.190.24.232      www.99bbs.com
60.190.24.232      www.holedo.com
60.190.24.232      www.the9.us
60.190.24.232      bbs.kijiji.com.cn
60.190.24.232      www.tomatolei.com
60.190.24.232      www.hy6123.com
60.190.24.232      www.9thena.com
60.190.24.232      www.x2004x.com
60.190.24.232      www.678se.com
60.190.24.232      sehulu.ap126.com
60.190.24.232      bbs.sejie.com
60.190.24.232      www.qqkx.com
60.190.24.232      qqkx.com
60.190.24.232      www.21all.com
60.190.24.232      www.110box.com
60.190.24.232      www.jptp.cn
60.190.24.232      www.6621.com
60.190.24.232      www.wo18.com
60.190.24.232      www.3721xyx.com
60.190.24.232      www.jcdy.cn
60.190.24.232      www.321007.com
60.190.24.232      www.caihongtang.com
60.190.24.232      www.citybrother.com
60.190.24.232      www.51ct.cn
60.190.24.232      d1.xihai.com
60.190.24.232      www.7yin.com
60.190.24.232      www.mmonly.com
60.190.24.232      bbsour.com
60.190.24.232      www.plvx.com
60.190.24.232      www.xise.cn
60.190.24.232      www.ovmv.com
60.190.24.232      ovmv.com
60.190.24.232      www.55dy.com
60.190.24.232      www.52vv.com
60.190.24.232      www.hzhai.com
60.190.24.232      hzhai.com
60.190.24.232      www.98li.com
60.190.24.232      www.222988.com
60.190.24.232      www.yulehoo.com
60.190.24.232      www.qqhow.com
60.190.24.232      www.haokuba.com
60.190.24.232      www.321007.com
60.190.24.232      www.zuoaitu.com
60.190.24.232      www.tuho.cn
60.190.24.232      www.79tt.com
60.190.24.232      www.love0.com
60.190.24.232      www.mxyoo.com
60.190.24.232      www.meimei520.com
60.190.24.232      www.hao121.com
60.190.24.232      www.5mmmm.com
60.190.24.232      www.7ting7.com
60.190.24.232      www.tangjiali.com
60.190.24.232      www.ylg5.com
60.190.24.232      www.53mm.cn
60.190.24.232      www.nvhuo.com
60.190.24.232      nvhuo.com
60.190.24.232      www.18yihou.com
60.190.24.232      www.10gg.com
60.190.24.232      www.sexypk.com
60.190.24.232      www.meinv8.net
60.190.24.232      www.saoyao.com
60.190.24.232      url.52.la
60.190.24.232      www.TongMeng.Net
60.190.24.232      www.0654.cn
60.190.24.232      www.8yl8.com
60.190.24.232      www.haha9999.com
60.190.24.232      www.kantu8.com
60.190.24.232      www.uu8.cn
60.190.24.232      www.47tu.com
60.190.24.232      www.qu520.com
60.190.24.232      www.4443.cn
60.190.24.232      www.5kanmm.com
60.190.24.232      pic.p558.com
60.190.24.232      www.15180.com
60.190.24.232      www.28mms.com
60.190.24.232      10gg.com
60.190.24.232      www.semm520.com
60.190.24.232      www.51meimei.net
60.190.24.232      5mmm.net
60.190.24.232      www.plmm168.com
60.190.24.232      520free.2000y.net
60.190.24.232      1sy.cn
60.190.24.232      www.510ok.com
60.190.24.232      pic.boolife.com
60.190.24.232      www888888.anyp.cn
60.190.24.232      mm.18up.cn
60.190.24.232      www.ulj.cn
60.190.24.232      www.pp258.com
60.190.24.232      bbs.9k0.net
60.190.24.232      www.aimm.be
60.190.24.232      www.mm2007.com
60.190.24.232      www.qin119.com
60.190.24.232      www.2rrr.com
60.190.24.232      www.23135.com
60.190.24.232      www.hao688.net
60.190.24.232      www.sf35.com
60.190.24.232      www.535boy.com
60.190.24.232      www.5e5c.com
60.190.24.232      hy1914.net
60.190.24.232      www.km98.com
60.190.24.232      www.554477.com
60.190.24.232      link.soaaa.com
60.190.24.232      www.win815.com
60.190.24.232      www.3j3j.com
60.190.24.232      www.cnpaiming.com
60.190.24.232      www.t5198.com
60.190.24.232      www.mp3wang.cn
60.190.24.232      www.ylxxb.com
60.190.24.232      www.dyxp.net
60.190.24.232      2007bbs.com
60.190.24.232      www.yinhelink.com
60.190.24.232      www.zxmm.net
60.190.24.232      www.qqhoho.com
60.190.24.232      www.6000ys.com
60.190.24.232      www.99move.com
60.190.24.232      www.111dy.com
60.190.24.232      www.cqsf999.com
60.190.24.232      www.3000ok.com
60.190.24.232      www.92045.com
60.190.24.232      www.71gg.com
60.190.24.232      bbs.7gg.com
60.190.24.232      www.7gg.com
60.190.24.232      a.keyrun.com
60.190.24.232      www.8716.com
60.190.24.232      js4.all4ad.net
60.190.24.232      mmsa.18dx.com
60.190.24.232      lm.union.daqi.com
60.190.24.232      count19.51yes.com
60.190.24.232      league.yesky.com
60.190.24.232      www.keyiit.com
60.190.24.232      iplus.allyes.com
60.190.24.232      code.union.teein.com
60.190.24.232      open.369ip.com
60.190.24.232      link88.be
60.190.24.232      6lian.net
60.190.24.232      top.87856.com
60.190.24.232      www.65458.com
60.190.24.232      ad.t2t2.com
60.190.24.232      t2t2.com
60.190.24.232      www.t2t2.com
60.190.24.232      vip1.t2t2.com
60.190.24.232      vip2.t2t2.com
60.190.24.232      vip3.t2t2.com
60.190.24.232      vip4.t2t2.com
60.190.24.232      vip5.t2t2.com
60.190.24.232      vip6.t2t2.com
60.190.24.232      vip7.t2t2.com
60.190.24.232      vip8.t2t2.com
60.190.24.232      vip9.t2t2.com
60.190.24.232      count.cgiworld.net
60.190.24.232      www.pinaccesscode.com
60.190.24.232      51xcn.24cc.cc
60.190.24.232      xxx123.adult-web-host.com
60.190.24.232      sexfin.ko168.com
60.190.24.232      52loli.com
60.190.24.232      www38.websamba.com
60.190.24.232      www.seoio.com
60.190.24.232      board9.cgiworld.dreamwiz.com
60.190.24.232      2586.us
60.190.24.232      2586.24cc.cc
60.190.24.232      yh.adultcybernet.com
60.190.24.232      sexbt.ko168.com
60.190.24.232      www33.websamba.com
60.190.24.232      www.caonxm.com
60.190.24.232      us604.sszzz.net
60.190.24.232      www.d9dy.com
60.190.24.232      www.t335.net
60.190.24.232      www.8rm.net
60.190.24.232      www.wangyou.com
60.190.24.232      pub.lele.com
60.190.24.232      www.1ting.com
60.190.24.232      www.ttjj.com
60.190.24.232      www.52zt.com
60.190.24.232      www.msncn.com
60.190.24.232      www.hnhao123.com
60.190.24.232      www.urlall.com
60.190.24.232      www.szpage.cn
60.190.24.232      www.ha123.com
60.190.24.232      www.52789.com
60.190.24.232      www.wz-wz.net
60.190.24.232      www.ynlink.com
60.190.24.232      www.yhurl.com
60.190.24.232      www.hang123.com
60.190.24.232      www.fqwz.com
60.190.24.232      net.yinsha.com
60.190.24.232      www.029123.com
60.190.24.232      www.4766.net
60.190.24.232      www.bvgn.com
60.190.24.232      www.get88.com
60.190.24.232      www.xun123.com
60.190.24.232      www.26800.cn
60.190.24.232      www.soluo.com
60.190.24.232      www.wzdq8.com
60.190.24.232      www.haosx.com
60.190.24.232      www.hcwz.cn
60.190.24.232      www.51nm.com
60.190.24.232      www.laisouba.com
60.190.24.232      www.easezone.com
60.190.24.232      www.sdwz.net
60.190.24.232      www.tturl.com
60.190.24.232      www.loodns.com
60.190.24.232      www.516789.com
60.190.24.232      www.newbe.net
60.190.24.232      www.haotao.com
60.190.24.232      www.qq256.com
60.190.24.232      www.6bb.com
60.190.24.232      www.dj99.com
60.190.24.232      tt.1860ls.com
60.190.24.232      www.xuncai.com
60.190.24.232      u.u8u.com
60.190.24.232      www.dedew.com
60.190.24.232      www.dy55.com
60.190.24.232      www.dy33.com
60.190.24.232      www.13860.com
60.190.24.232      2.003004.com
60.190.24.232      www.mvtu.cn
60.190.24.232      pic.3388.cc
60.190.24.232      xs.008f.com
60.190.24.232      www.003004.com
60.190.24.232      003004.com
60.190.24.232      7shai.com
60.190.24.232      www.7shai.com
60.190.24.232      www.ying123.com
60.190.24.232      www.3366888.com
60.190.24.232      3366888.com
60.190.24.232      www.789yy.com
60.190.24.232      www.mm667.com
60.190.24.232      www.dy359.com
60.190.24.232      www.pppooo.com
60.190.24.232      www.18389.com
60.190.24.232      www.mk456.com
60.190.24.232      www.tt566.com
60.190.24.232      88.991100.com
60.190.24.232      www.880077.com
60.190.24.232      www.ta38.com
60.190.24.232      www.ttdyw.com
60.190.24.232      www.loversea.com
60.190.24.232      loversea.com
60.190.24.232      www.hhhx.com
60.190.24.232      www.6le.com
60.190.24.232      6le.com
60.190.24.232      www.a5a5.net
60.190.24.232      www.wa38.com
60.190.24.232      www.fxxj.com
60.190.24.232      www.oa18.com
60.190.24.232      sp1.comefreeloaders.com
60.190.24.232      www.netperi.com
60.190.24.232      www.nice123.com
60.190.24.232      nice123.com
60.190.24.232      www.tutu365.net
60.190.24.232      www.greatestjournal.com
60.190.24.232      hot.yesky.com
60.190.24.232      www.ceqq.net
60.190.24.232      cc.bobvod.com
60.190.24.232      so.4kiki.net
60.190.24.232      szlife.oeeee.com
60.190.24.232      www.18ok.com
60.190.24.232      www.raohua.com
60.190.24.232      bbs.du173.com
60.190.24.232      www.19911.com
60.190.24.232      www.91ktv.cn
60.190.24.232      77.gnway.net
60.190.24.232      sex.ncc.com.tw
60.190.24.232      www.520tt.net
60.190.24.232      www.11670.com
60.190.24.232      m.11670.com
60.190.24.232      mop.nvsk.com
60.190.24.232      e-zone.9e3.com
60.190.24.232      www.bt.yy162.com
60.190.24.232      www.hkqq.net
60.190.24.232      520.5252love.com
60.190.24.232      www.mmliaotianshi.com
60.190.24.232      www.333nnn.com
60.190.24.232      www.rrbbb.com
60.190.24.232      www.woailiao.com
60.190.24.232      www.365dy.org
60.190.24.232      www.xianwang.com
60.190.24.232      popospider.51.net
60.190.24.232      www1.wangzhiku.com
60.190.24.232      www.wangzhiku.com
60.190.24.232      www.369ip.com
60.190.24.232      www.wanqq.cn
60.190.24.232      www.seliao.net
60.190.24.232      www.mmctwo.com
60.190.24.232      www.showsex.cn
60.190.24.232      www.xin123.cn
60.190.24.232      www.bzsky.com
60.190.24.232      www.53371.com
gototop
 
123   2  /  3  页   跳转
页面顶部
Powered by Discuz!NT