[PID: 3276][C:\Program Files\lotus\notes\ntaskldr.EXE] [IBM Corp, 6.5.10.4008]
[C:\Program Files\lotus\notes\nnotes.dll] [IBM Corp, 6.5.10.4008]
[C:\Program Files\lotus\notes\nxmlpar.dll] [IBM Corp, 6.5.10.4008]
[C:\Program Files\lotus\notes\nxmlcommon.dll] [IBM Corp, 6.5.10.4008]
[C:\Program Files\lotus\notes\js32.dll] [IBM Corp, 6.5.10.4008]
[C:\Program Files\lotus\notes\NLSCCSTR.DLL] [IBM Corp, 6.5.10.4008]
[C:\Program Files\lotus\notes\ndgts.dll] [IBM Corp, 6.5.10.4008]
[C:\Program Files\lotus\notes\NSTRINGS.DLL] [IBM Corp, 6.5.10.4008]
[C:\Program Files\lotus\notes\nRsVirHD.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 1]
[C:\Program Files\lotus\notes\nRsScan.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 8]
[C:\Program Files\lotus\notes\namhook.DLL] [IBM Corp, 6.5.10.4008]
[C:\Program Files\lotus\notes\nRsVirEM.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 1]
[C:\Program Files\lotus\notes\nhkdaemn.DLL] [IBM Corp, 6.5.10.4008]
[C:\Program Files\lotus\notes\nhldaemn.DLL] [IBM Corp, 6.5.10.4008]
[C:\Program Files\lotus\notes\nTCP.DLL] [IBM Corp, 6.5.10.4008]
[C:\Program Files\lotus\notes\nNETBIOS.DLL] [IBM Corp, 6.5.10.4008]
[PID: 3324][C:\Program Files\Common Files\Sogou PXP\p2psvr.exe] [Sohu.com Inc., 2, 0, 0, 22]
[C:\Program Files\P4P\tbupdate.dll] [Sogou.com Inc., 1, 0, 1, 1]
[C:\Program Files\P4P\p4pipc.dll] [Sogou.com Inc., 1, 0, 0, 13]
[C:\Program Files\P4P\SoDALib.dll] [Sohu.com Inc., 1, 2, 1, 7]
[PID: 3688][C:\Program Files\Internet Explorer\IEXPLORE.EXE] [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
[C:\WINDOWS\system32\SoDAHK.DLL] [Sogou.com Inc., 1, 0, 1, 5]
[C:\Program Files\Kingsoft\XDict\Cjktl32.dll] [N/A, N/A]
[C:\WINDOWS\system32\AcSignIcon.dll] [Autodesk, 16.0.0.86]
[C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx] [Macromedia, Inc., 8,0,24,0]
[PID: 2760][C:\Program Files\WinRAR\WinRAR.exe] [Alexander Roshal, 3.42]
[C:\Program Files\Kingsoft\XDict\Cjktl32.dll] [N/A, N/A]
[C:\WINDOWS\system32\AcSignIcon.dll] [Autodesk, 16.0.0.86]
[PID: 1856][C:\DOCUME~1\Owner\LOCALS~1\Temp\Rar$EX00.390\SREng.EXE] [Smallfrogs Studio, 2.3.13.690]
[C:\Program Files\Kingsoft\XDict\Cjktl32.dll] [N/A, N/A]
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
219.238.46.142 csci
218.244.245.246 cscec
==================================
API HOOK
N/A
==================================
[/CODE]