[PID: 2532][C:\Program Files\Synaptics\SynTP\SynTPLpr.exe]  [Synaptics, Inc., 7.5.17.8 19Nov03]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.5.17.8 19Nov03]
    [D:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 2552][C:\Program Files\Synaptics\SynTP\SynTPEnh.exe]  [Synaptics, Inc., 7.5.17.8 19Nov03]
    [C:\WINDOWS\System32\SynCOM.dll]  [Synaptics, Inc., 7.5.17.8 19Nov03]
    [C:\WINDOWS\system32\SynTPAPI.dll]  [Synaptics, Inc., 7.5.17.8 19Nov03]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.5.17.8 19Nov03]
    [D:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 2568][C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe]  [N/A, N/A]
    [C:\Program Files\ThinkPad\PkgMgr\HOTKEY_2\tphk_2k.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\Oemdspif.dll]  [Intel Corporation, 3.0.0.4396]
    [C:\WINDOWS\system32\igfxdev.dll]  [Intel Corporation, 3.0.0.4396]
    [D:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 2620][C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON.EXE]  [IBM Corp., 3, 1, 0, 0]
    [C:\Program Files\ThinkPad\ConnectUtilities\QCON.dll]  [IBM Corp., 3, 1, 0, 0]
    [C:\Program Files\ThinkPad\ConnectUtilities\MerlinC201.dll]  [Novatel Wireless Inc., 1, 0, 0, 1]
    [C:\Program Files\ThinkPad\ConnectUtilities\ANCA.dll]  [N/A, N/A]
    [C:\Program Files\ThinkPad\ConnectUtilities\ANC.dll]  [N/A, N/A]
    [C:\Program Files\ThinkPad\ConnectUtilities\Res\CH\IconRes.dll]  [N/A, N/A]
    [D:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 2700][C:\WINDOWS\system32\igfxtray.exe]  [Intel Corporation, 3.0.0.4396]
    [C:\WINDOWS\system32\hccutils.DLL]  [Intel Corporation, 3.0.0.4396]
    [C:\WINDOWS\system32\igfxsrvc.dll]  [Intel Corporation, 3.0.0.4396]
    [C:\WINDOWS\system32\igfxres.dll]  [Intel Corporation, 3.0.0.4396]
    [C:\WINDOWS\system32\igfxress.dll]  [Intel Corporation, 3.0.0.4396]
    [D:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 2724][C:\Program Files\Common Files\Symantec Shared\ccApp.exe]  [Symantec Corporation, 104.0.8.3]
    [C:\Program Files\Common Files\Symantec Shared\ccL40.dll]  [Symantec Corporation, 104.0.8.3]
    [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  [Symantec Corporation, 104.0.8.3]
    [C:\Program Files\Common Files\Symantec Shared\ccSet.dll]  [Symantec Corporation, 104.0.8.3]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\ANTISPAM\ASOEHOOK.DLL]  [Symantec Corporation, 2006.2.00.153]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\CCALERT.DLL]  [Symantec Corporation, 104.0.8.3]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\CCEMLPXY.DLL]  [Symantec Corporation, 104.0.8.3]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.5.17.8 19Nov03]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\OPTIONS\SYMDYNLD.DLL]  [Symantec Corporation, 2006.2.00.153]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\SECURI~1\NSCTRAY.DLL]  [Symantec Corporation, 2006.1.8.2]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\SECURI~1\NSCTRAY.LOC]  [Symantec Corporation, 2006.1.8.2]
    [C:\PROGRA~1\NORTON~1\ISLALERT.DLL]  [Symantec Corporation, 9.0.0.73]
    [C:\Program Files\Common Files\Symantec Shared\ccProSub.dll]  [Symantec Corporation, 104.0.8.3]
    [C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll]  [Symantec Corporation, 104.0.8.3]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\rcEmlPxy.dll]  [Symantec Corporation, 104.0.8.3]
    [C:\PROGRA~1\NORTON~1\AlertRes.dll]  [Symantec Corporation, 9.0.0.73]
    [C:\PROGRA~1\NORTON~1\NISTRAY.DLL]  [Symantec Corporation, 9.0.0.73]
    [C:\WINDOWS\system32\SymNeti.DLL]  [Symantec Corporation, 6.0.4.402]
    [C:\WINDOWS\system32\SYMREDIR.DLL]  [Symantec Corporation, 6.0.4.402]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\SECURI~1\NSCUICOR.dll]  [Symantec Corporation, 2006.1.8.2]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\SECURI~1\NSCUICOR.LOC]  [Symantec Corporation, 2006.1.8.2]
    [C:\PROGRA~1\NORTON~1\NISTrRes.dll]  [Symantec Corporation, 9.0.0.73]
    [C:\PROGRA~1\NORTON~1\NORTON~1\CCIMSCAN.DLL]  [Symantec Corporation, 104.0.5.3]
    [C:\Program Files\Common Files\Symantec Shared\Security Console\NSC_Hlpr.dll]  [Symantec Corporation, 2006.1.8.2]
    [C:\PROGRA~1\NORTON~1\NORTON~1\DEFALERT.DLL]  [Symantec Corporation, 12.6.0.1]
    [C:\PROGRA~1\NORTON~1\NORTON~1\HPP32.DLL]  [Symantec Corporation, 12.6.0.1]
    [C:\Program Files\Common Files\Symantec Shared\ccLogin.dll]  [Symantec Corporation, 104.0.8.3]
    [C:\Program Files\Common Files\Symantec Shared\AntiSpam\asFilter.dll]  [Symantec Corporation, 2006.2.00.153]
    [C:\Program Files\Common Files\Symantec Shared\AntiSpam\asUniPlg.dll]  [Symantec Corporation, 2006.2.00.153]
    [C:\PROGRA~1\NORTON~1\NORTON~1\HPPRES32.loc]  [Symantec Corporation, 12.6.0.1]
    [C:\PROGRA~1\NORTON~1\ccFWSetg.dll]  [Symantec Corporation, 104.0.5.3]
    [C:\PROGRA~1\NORTON~1\NORTON~1\NAVAPW32.DLL]  [Symantec Corporation, 12.6.0.1]
    [C:\PROGRA~1\NORTON~1\NORTON~1\apwutil.dll]  [Symantec Corporation, 12.6.0.1]
    [C:\Program Files\Common Files\Symantec Shared\AntiSpam\asSpmEvt.dll]  [Symantec Corporation, 2006.2.00.153]
    [D:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
    [C:\PROGRA~1\NORTON~1\NORTON~1\navapw32.loc]  [Symantec Corporation, 12.6.0.1]
    [C:\Program Files\Norton Internet Security\Norton AntiVirus\HPPEVT32.dll]  [Symantec Corporation, 12.6.0.1]
    [C:\PROGRA~1\NORTON~1\NORTON~1\NAVOPTRF.DLL]  [Symantec Corporation, 12.0.0.94]
    [C:\PROGRA~1\NORTON~1\NORTON~1\apwutil.loc]  [Symantec Corporation, 12.6.0.1]
    [C:\PROGRA~1\NORTON~1\NORTON~1\STATUSHP.DLL]  [Symantec Corporation, 12.6.0.1]
    [C:\Program Files\Norton Internet Security\Norton AntiVirus\Navlcom.dll]  [Symantec Corporation, 12.6.0.1]
    [C:\Program Files\Norton Internet Security\Norton AntiVirus\NAVError.dll]  [Symantec Corporation, 12.6.0.1]
    [C:\Program Files\Norton Internet Security\Norton AntiVirus\apwcmdnt.dll]  [Symantec Corporation, 12.6.0.1]
    [C:\Program Files\Norton Internet Security\Norton AntiVirus\apwcmdNT.loc]  [Symantec Corporation, 12.6.0.1]
    [C:\Program Files\Norton Internet Security\Norton AntiVirus\ccAVMail.dll]  [Symantec Corporation, 104.0.5.3]
    [C:\Program Files\Norton Internet Security\ObrkData.dll]  [Symantec Corporation, 9.0.0.73]
    [C:\Program Files\Norton Internet Security\ObrkAV.dll]  [Symantec Corporation, 9.0.0.73]
    [C:\PROGRA~1\NORTON~1\NORTON~1\NAVSTATS.dll]  [Symantec Corporation, 12.6.0.1]
    [C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCEvt.dll]  [Symantec Corporation, 2.1.0.4]
    [C:\Program Files\Norton Internet Security\Norton AntiVirus\NAVEvent.dll]  [Symantec Corporation, 12.6.0.1]
    [C:\Program Files\Norton Internet Security\Norton AntiVirus\naverror.loc]  [Symantec Corporation, 12.6.0.1]
    [C:\Program Files\Norton Internet Security\ccEmlflt.dll]  [Symantec Corporation, 104.0.1.17]
    [C:\Program Files\Common Files\Symantec Shared\ccPxyEvt.dll]  [Symantec Corporation, 104.0.11.1]
    [C:\Program Files\Symantec\LiveUpdate\NetDetectController_3_0.DLL]  [Symantec Corporation, 3.0.0.171]
    [C:\PROGRA~1\NORTON~1\NORTON~1\NAVTasks.dll]  [Symantec Corporation, 12.6.0.1]
    [C:\PROGRA~1\NORTON~1\NORTON~1\NAVTasks.loc]  [Symantec Corporation, 12.6.0.1]
    [C:\Program Files\Norton Internet Security\ObrkIDS.dll]  [Symantec Corporation, 9.0.0.73]
    [C:\Program Files\Norton Internet Security\SymFWAgt.dll]  [Symantec Corporation, 104.0.1.17]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\SECURI~1\NSCSRVPS.DLL]  [Symantec Corporation, 2006.1.8.2]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\SECURI~1\NSCUIBL.DLL]  [Symantec Corporation, 2006.1.8.2]
    [C:\Program Files\Norton Internet Security\NISAlert.dll]  [Symantec Corporation, 9.0.0.73]
    [C:\Program Files\Norton Internet Security\NISRes.dll]  [Symantec Corporation, 9.0.0.73]
    [C:\Program Files\Norton Internet Security\Norton AntiVirus\NAVOpts.dll]  [Symantec Corporation, 12.6.0.1]
    [C:\Program Files\Norton Internet Security\Norton AntiVirus\navopts.loc]  [Symantec Corporation, 12.6.0.1]
    [C:\Program Files\Norton Internet Security\Norton AntiVirus\NAVAPSCR.dll]  [Symantec Corporation, 12.6.0.1]
    [C:\Program Files\Symantec\LiveUpdate\ProductRegCom_3_0.DLL]  [Symantec Corporation, 3.0.0.171]
    [C:\Program Files\Symantec\LiveUpdate\LuComServerPS_3_0.DLL]  [Symantec Corporation, 3.0.0.171]
    [C:\PROGRA~1\NORTON~1\NORTON~1\defalert.loc]  [Symantec Corporation, 12.6.0.1]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\rcAlert.dll]  [Symantec Corporation, 104.0.8.3]
    [C:\Program Files\Common Files\Symantec Shared\ccWebWnd.dll]  [Symantec Corporation, 104.0.8.3]
    [C:\Program Files\Norton Internet Security\WrapUM.dll]  [Symantec Corporation, 9.0.0.73]
    [C:\Program Files\Common Files\Symantec Shared\Options\UIHelper.dll]  [Symantec Corporation, 2006.2.00.156]
    [C:\Program Files\Common Files\Symantec Shared\Options\CLTWrap.dll]  [Symantec Corporation, 9.0.0.127]
    [C:\Program Files\Norton Internet Security\TLevel.dll]  [Symantec Corporation, 104.0.1.17]

[PID: 2748][C:\Program Files\Common Files\Real\Update_OB\realsched.exe]  [RealNetworks, Inc., 0.1.0.3427]
    [D:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 2768][D:\Program Files\Rising\AntiSpyware\runiep.exe]  [Beijing Rising Technology Co., Ltd., 1, 0, 1, 6]
    [D:\Program Files\Rising\AntiSpyware\iep_ctrl.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 4]
    [D:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.5.17.8 19Nov03]
[PID: 2776][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 2892][C:\Program Files\ThinkPad\PkgMgr\HOTKEY\TPONSCR.exe]  [N/A, N/A]
    [D:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 2916][C:\Program Files\ThinkPad\PkgMgr\HOTKEY_1\TpScrex.exe]  [IBM Corporation, 1.06]
    [D:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 2828][C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE]  [Symantec Corporation, 2006.1.8.2]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\SECURI~1\NSCSRVPS.DLL]  [Symantec Corporation, 2006.1.8.2]
    [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  [Symantec Corporation, 104.0.8.3]
    [C:\Program Files\Common Files\Symantec Shared\ccL40.dll]  [Symantec Corporation, 104.0.8.3]
    [C:\Program Files\Common Files\Symantec Shared\ccSet.dll]  [Symantec Corporation, 104.0.8.3]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\SECURI~1\NSCUIBL.DLL]  [Symantec Corporation, 2006.1.8.2]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\SECURI~1\NSCUICOR.LOC]  [Symantec Corporation, 2006.1.8.2]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\SECURI~1\NSCJSBL.DLL]  [Symantec Corporation, 2006.1.8.2]
    [C:\Program Files\Norton Internet Security\Norton AntiVirus\avFPXY.dll]  [Symantec Corporation, 2006.1.4.4]
    [C:\Program Files\Norton Internet Security\isFtMst.dll]  [Symantec Corporation, 2006.1.1.2]
    [C:\Program Files\Norton Internet Security\nscNISpi.dll]  [Symantec Corporation, 9.0.0.73]
    [C:\PROGRA~1\NORTON~1\NORTON~1\avNSCPlg.dll]  [Symantec Corporation, 12.6.0.1]
    [C:\PROGRA~1\NORTON~1\NORTON~1\avNSCPlg.loc]  [Symantec Corporation, 12.6.0.1]
    [C:\Program Files\Common Files\Symantec Shared\Security Console\NSC_WSCR.DLL]  [Symantec Corporation, 2006.1.8.2]
    [C:\Program Files\Common Files\Symantec Shared\Security Console\NSC_WSCR.LOC]  [Symantec Corporation, 2006.1.8.2]
    [C:\Program Files\Common Files\Symantec Shared\Security Console\NSC_Hlpr.dll]  [Symantec Corporation, 2006.1.8.2]
    [C:\Program Files\Norton Internet Security\isFtPxy.dll]  [Symantec Corporation, 2006.1.1.2]
    [C:\Program Files\Norton Internet Security\NISRes.dll]  [Symantec Corporation, 9.0.0.73]
    [C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll]  [Symantec Corporation, 104.0.8.3]
    [C:\Program Files\Common Files\Symantec Shared\ccProSub.dll]  [Symantec Corporation, 104.0.8.3]
    [C:\Program Files\Norton Internet Security\nisProd.dll]  [Symantec Corporation, 9.0.0.73]
    [C:\Program Files\Common Files\Symantec Shared\AntiSpam\asFtPxy.dll]  [Symantec Corporation, 2006.1.0.107]
    [C:\Program Files\Common Files\Symantec Shared\AntiSpam\asNSCPlg.dll]  [Symantec Corporation, 2006.2.00.153]
    [C:\Program Files\Common Files\Symantec Shared\Options\asOpts.dll]  [Symantec Corporation, 2006.2.00.153]
    [C:\Program Files\Common Files\Symantec Shared\ccLogin.dll]  [Symantec Corporation, 104.0.8.3]
    [C:\Program Files\Common Files\Symantec Shared\AdBlocking\adFtPxy.dll]  [Symantec Corporation, 2006.1.0.107]
    [C:\Program Files\Common Files\Symantec Shared\AdBlocking\adNscPlg.dll]  [Symantec Corporation, 2006.2.00.150]
    [C:\Program Files\Common Files\Symantec Shared\Options\SymAd.dll]  [Symantec Corporation, 2006.2.00.150]
[PID: 3704][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\ANTISPAM\ASOEHOOK.DLL]  [Symantec Corporation, 2006.2.00.153]
    [C:\Program Files\Common Files\Symantec Shared\ccL40.dll]  [Symantec Corporation, 104.0.8.3]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.5.17.8 19Nov03]
    [C:\WINDOWS\system32\xunleibho_v14.dll]  [Thunder Networking Technologies,LTD, 4, 6, 0, 62]
    [C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll]  [Symantec Corporation, 9.0.0.73]
    [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  [Symantec Corporation, 104.0.8.3]
    [C:\Program Files\Common Files\Symantec Shared\AdBlocking\SHEXTRES.DLL]  [Symantec Corporation, 9.0.0.73]
    [C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll]  [Symantec Corporation, 12.6.0.1]
    [D:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
[PID: 852][C:\DOCUME~1\李辉\LOCALS~1\Temp\Rar$EX00.328\SREng.EXE]  [Smallfrogs Studio, 2.3.13.690]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\ANTISPAM\ASOEHOOK.DLL]  [Symantec Corporation, 2006.2.00.153]
    [C:\Program Files\Common Files\Symantec Shared\ccL40.dll]  [Symantec Corporation, 104.0.8.3]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.5.17.8 19Nov03]
    [D:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
[C:\]
[AutoRun]
open=fun.xls.exe
shellexecute=fun.xls.exe
shell\Auto\command=fun.xls.exe
shell=Auto
[VVflagRun]
aabb=kdkfjdkfk1
[D:\]
[AutoRun]
open=fun.xls.exe
shellexecute=fun.xls.exe
shell\Auto\command=fun.xls.exe
shell=Auto
[VVflagRun]
aabb=kdkfjdkfk1
[E:\]
[AutoRun]
open=fun.xls.exe
shellexecute=fun.xls.exe
shell\Auto\command=fun.xls.exe
shell=Auto
[VVflagRun]
aabb=kdkfjdkfk1

==================================
HOSTS 文件
127.0.0.1      localhost

==================================
API HOOK
N/A

==================================


[/CODE]

分析得怎么样了

帖子沉的好快啊

帖子沉的好快啊