{CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
[Shockwave Flash
Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx, Macromedia, Inc.>
[&使用迅雷下载]
<e:\Thunder\Program\GetUrl.htm, N/A>
[&使用迅雷下载全部链接]
<e:\Thunder\Program\GetAllUrl.htm, N/A>
[>>彩信发送<<]
<res://C:\PROGRA~1\MMSASS~1\mmsass~1.dll/mms.htm, N/A>
[上传到QQ网络硬盘]
<D:\Program Files\Tencent\qq\AddToNetDisk.htm, N/A>
[加入POCO网摘(&K)]
<http://my.poco.cn/fav/rightClick.php, N/A>
[导出到 Microsoft Office Excel(&X)]
<res://D:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000, N/A>
[我的POCO网摘(&O)]
<http://my.poco.cn/fav/open_myfav.php, N/A>
[添加到QQ自定义面板]
<D:\Program Files\Tencent\qq\AddPanel.htm, N/A>
[添加到QQ表情]
<D:\Program Files\Tencent\qq\AddEmotion.htm, N/A>
==================================
正在运行的进程
[PID: 512][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 560][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 600][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 648][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\wshcon32.dll] <><4, 0, 0, 0>
[PID: 660][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 824][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 872][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\wshcon32.dll] <><4, 0, 0, 0>
[PID: 936][e:\Rav\CCenter.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[PID: 952][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\wshcon32.dll] <><4, 0, 0, 0>
[PID: 1008][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1052][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1076][e:\Rav\Ravmond.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 33>
[e:\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
[e:\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[e:\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[e:\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[e:\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[e:\Rav\RsLog.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20>
[e:\Rav\HOOKSYS.dll] <Beijing Rising Technology Co., Ltd.><18, 1, 0, 11>
[e:\Rav\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30>
[e:\Rav\libload.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[e:\Rav\VirusLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[e:\Rav\regmon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
[e:\Rav\HookWeb.dll] <rising><18, 0, 0, 2>
[e:\Rav\MemMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[e:\Rav\expscan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[e:\Rav\mPorts.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3>
[e:\Rav\MailMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[e:\Rav\SpamEng.dll] <N/A><18, 0, 0, 6>
[e:\Rav\engine.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30>
[C:\WINDOWS\system32\wshcon32.dll] <><4, 0, 0, 0>
[e:\Rav\PostTrt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12>
[e:\Rav\UnExe.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[e:\Rav\ScanExec.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[e:\Rav\ScanEx.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 14>
[e:\Rav\NvFile.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
[e:\Rav\ScanMac.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
[e:\Rav\ScanSct.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18>
[e:\Rav\Unpacker.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[e:\Rav\ScanNet.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[e:\Rav\ExtOLE.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
[PID: 1308][e:\Rav\RavStub.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16>
[e:\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[e:\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[PID: 1436][C:\WINDOWS\system32\Hummingbird\Connectivity\7.10\Inetd\inetd32.exe] <Hummingbird Ltd.><7.1.0.0>
[C:\WINDOWS\system32\HCLNLS.dll] <Hummingbird Ltd.><7.1.0.0>
[C:\WINDOWS\system32\Hummingbird\Connectivity\7.10\Inetd\humprdin.dll] <Hummingbird Ltd.><7.1.0.0>
[C:\WINDOWS\system32\Hummingbird\Connectivity\7.10\Inetd\HCINETD.NLS] <Hummingbird Ltd.><7.1.0.0>
[PID: 1452][C:\WINDOWS\system32\Hummingbird\Connectivity\7.10\Jconfig\jconfigdnt.exe] <Hummingbird Ltd.><7.1.0.0>
[PID: 1700][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\AcSignIcon.dll] <Autodesk><16.1.63.0>
[C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
[C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll] <Autodesk><16.1.63.0>
[C:\Program Files\WIBU-SYSTEMS\System\WibuShellExt.dll] <WIBU-SYSTEMS AG><Version 1.01 of 2001-Nov-28>
[C:\WINDOWS\system32\nvcpl.dll] <NVIDIA Corporation><6.14.10.9131>
[C:\WINDOWS\system32\NVRSZHC.DLL] <NVIDIA Corporation><6.14.10.9131>
[C:\WINDOWS\system32\nvshell.dll] <N/A><N/A>
[d:\Program Files\Creative\Creative Zen Micro\Zen Micro Media Explorer\CTJBNS2.dll] <Creative Technology Ltd><4.0.16.0>
[d:\Program Files\Creative\Creative Zen Micro\Zen Micro Media Explorer\CTIntrfc.dll] <Creative Technology Ltd><2.1.0.0>
[d:\Program Files\Creative\Creative Zen Micro\Zen Micro Media Explorer\CTConfig.DLL] <Creative Technology Ltd><4.0.10.0>
[d:\Program Files\Creative\Creative Zen Micro\Zen Micro Media Explorer\JBNSRES.DLL] <Creative Technology Ltd><4.0.10.0>
[e:\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[d:\Program Files\WinRAR\rarext.dll] <N/A><N/A>
[D:\Program Files\Hummingbird\Connectivity\7.10\HostExplorer\Ftp\heshell.dll] <Hummingbird Ltd.><7.1.0.0>
[C:\WINDOWS\system32\xunleibho_v4.dll] <><4, 3, 2, 29>
[d:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx] <><1, 0, 0, 1>
[PID: 1780][C:\WINDOWS\SOUNDMAN.EXE] <Realtek Semiconductor Corp.><5.1.0.30>
[PID: 1820][C:\Program Files\Microsoft IntelliPoint\point32.exe] <Microsoft Corporation><5.30.607.0>
[PID: 1828][D:\Program Files\DAEMON Tools\daemon.exe] <DT Soft Ltd.><4.00.0.0>
