[D:\Program Files\Tencent\QQGAME\Factory.dll]  [N/A, ]
    [D:\Program Files\Tencent\QQGAME\Logic\UIStyle.dll]  [N/A, ]
    [D:\Program Files\Tencent\QQGAME\ProtHand\QQProt.dll]  [N/A, ]
    [D:\Program Files\Tencent\QQGAME\Socket\NetMod.dll]  [N/A, ]
    [D:\Program Files\Tencent\QQ\QQMsgFriendMng.dll]  [N/A, ]
    [D:\Program Files\Tencent\QQ\QQZip.dll]  [TENCENT, 7,0,431,1723]
    [C:\WINDOWS\system32\sidjazy.dll]  [N/A, ]
[PID: 896 / 唐飞][D:\Program Files\Maxthon2\Maxthon.exe]  [Maxthon International ltd., 2, 0, 3, 4020]
    [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
    [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16512 (vista_gdr.070625-1522)]
    [D:\Program Files\Maxthon2\MxExt.dll]  [N/A, ]
    [D:\Program Files\Maxthon2\mxpp.dll]  [Maxthon, 1, 0, 0, 61]
    [D:\Program Files\Maxthon2\MxSk.dll]  [Maxthon, 1, 0, 0, 119]
    [D:\Program Files\Maxthon2\MxProxy2.dll]  [, 1, 0, 0, 3528]
    [D:\Program Files\Maxthon2\IMxWebBoost.dll]  [Maxthon, 1, 0, 0, 67]
    [D:\Program Files\Maxthon2\mxdb.dll]  [N/A, ]
    [D:\Program Files\Maxthon2\mxsafe.dll]  [Maxthon, 1, 0, 0, 475]
    [C:\WINDOWS\system32\rsztdpm.dll]  [N/A, ]
    [D:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll]  [Stardock Corporation, 5.01]
    [D:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll]  [TENCENT, 5, 0, 1, 22]
    [C:\Program Files\Internet Explorer\PLUGINS\WinSys88.Sys]  [N/A, ]
    [D:\Program Files\Maxthon2\MxFav.dll]  [Maxthon, 1, 0, 0, 220]
    [D:\Program Files\Maxthon2\maxzlib.dll]  [, 1.2.3]
    [D:\Program Files\Maxthon2\mxtool.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Maxthon2\mxfeedU.dll]  [, 1, 0, 45, 82]
    [C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL]  [Microsoft Corporation, 11.0.5510]
    [C:\WINDOWS\system32\avwgdmn.dll]  [N/A, ]
    [C:\WINDOWS\system32\avzxdmn.dll]  [N/A, ]
    [C:\WINDOWS\system32\ieframe.dll]  [Microsoft Corporation, 7.00.6000.16512 (vista_gdr.070625-1522)]
    [D:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\WINDOWS\system32\mscoree.dll]  [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
    [C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dll]  [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9d.ocx]  [Adobe Systems, Inc., 9,0,47,0]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\Program Files\Internet Explorer\ieproxy.dll]  [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
    [D:\Program Files\FlashGet\jccatch_1.dll]  [www.flashget.com, 1, 8, 4, 1007]
[PID: 1256 / 唐飞][D:\Program Files\WinRAR\WinRAR.exe]  [N/A, ]
    [C:\WINDOWS\system32\rsztdpm.dll]  [N/A, ]
    [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
    [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16512 (vista_gdr.070625-1522)]
    [D:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll]  [Stardock Corporation, 5.01]
    [D:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll]  [TENCENT, 5, 0, 1, 22]
    [C:\Program Files\Internet Explorer\PLUGINS\WinSys88.Sys]  [N/A, ]
    [c:\documents and settings\唐飞\application data\ppstream\bin\1.0.0.2\vodrc.dll]  [ppstream.com, 1.0.0.2]
    [C:\WINDOWS\system32\wpdshext.dll]  [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)]
    [C:\WINDOWS\system32\PortableDeviceApi.dll]  [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)]
    [C:\WINDOWS\system32\Audiodev.dll]  [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)]
    [C:\WINDOWS\system32\ieframe.dll]  [Microsoft Corporation, 7.00.6000.16512 (vista_gdr.070625-1522)]
    [C:\WINDOWS\system32\avzxdmn.dll]  [N/A, ]
    [C:\WINDOWS\system32\avwgdmn.dll]  [N/A, ]
    [C:\WINDOWS\system32\sidjazy.dll]  [N/A, ]
[PID: 3484 / 唐飞][G:\Temp\Rar$EX06.735\SREngPS.EXE]  [Smallfrogs Studio, 2.5.16.900]
    [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
    [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16512 (vista_gdr.070625-1522)]
    [D:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll]  [Stardock Corporation, 5.01]
    [D:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll]  [TENCENT, 5, 0, 1, 22]
    [C:\Program Files\Internet Explorer\PLUGINS\WinSys88.Sys]  [N/A, ]
    [C:\WINDOWS\system32\avwgdmn.dll]  [N/A, ]
    [C:\WINDOWS\system32\avzxdmn.dll]  [N/A, ]
    [C:\WINDOWS\system32\rsztdpm.dll]  [N/A, ]
    [G:\Temp\Rar$EX06.735\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]
    [C:\WINDOWS\system32\sidjazy.dll]  [N/A, ]

==================================
文件关联
.TXT  Error. [C:\WINDOWS\notepad.exe %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  Error. ["hh.exe" %1]
.HLP  Error. [winhlp32.exe %1]
.INI  Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost

==================================
进程特权扫描
特殊特权被允许： SeDebugPrivilege [PID = 1548, C:\WINDOWS\EXPLORER.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1548, C:\WINDOWS\EXPLORER.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 1988, D:\PROGRAM FILES\RISING\RFW\RFWMAIN.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 360, D:\PROGRAM FILES\RISING\RAV\RAVTASK.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 360, D:\PROGRAM FILES\RISING\RAV\RAVTASK.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 1984, D:\PROGRAM FILES\RISING\RAV\RAVMON.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1984, D:\PROGRAM FILES\RISING\RAV\RAVMON.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 2216, C:\WINDOWS\IGM.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2216, C:\WINDOWS\IGM.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 2656, D:\PROGRAM FILES\TENCENT\QQDOWNLOAD\QDAUTOUPDATE.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2656, D:\PROGRAM FILES\TENCENT\QQDOWNLOAD\QDAUTOUPDATE.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 400, D:\PROGRAM FILES\RISING\RAV\RAV.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 400, D:\PROGRAM FILES\RISING\RAV\RAV.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 1256, D:\PROGRAM FILES\WINRAR\WINRAR.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1256, D:\PROGRAM FILES\WINRAR\WINRAR.EXE]

==================================
API HOOK
N/A

==================================
隐藏进程
N/A

提交完毕，请帮忙分析下，谢谢！