ll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 21]
[PID: 1748][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
[PID: 1936][E:\瑞星杀毒\Rising\Rav\RavStub.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 16]
[E:\瑞星杀毒\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1]
[E:\瑞星杀毒\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[PID: 372][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 396][E:\瑞星杀毒\Rising\Rav\RavTask.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 22]
[E:\瑞星杀毒\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[E:\瑞星杀毒\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
[E:\瑞星杀毒\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11]
[E:\瑞星杀毒\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1]
[PID: 412][E:\瑞星杀毒\Rising\Rav\Ravmon.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 1, 39]
[E:\瑞星杀毒\Rising\Rav\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 26]
[E:\瑞星杀毒\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20]
[E:\瑞星杀毒\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
[E:\瑞星杀毒\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11]
[E:\瑞星杀毒\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[E:\瑞星杀毒\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1]
[E:\瑞星杀毒\Rising\Rav\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
[PID: 448][C:\WINDOWS\VM_STI.EXE] [Vimicro, 4, 2, 1124, 6]
[C:\WINDOWS\system32\msdmo.dll] [N/A, N/A]
[C:\WINDOWS\system32\VM31bPrp.Ax] [Vimicro, 1.00.01.00]
[PID: 1000][C:\WINDOWS\system32\wdfmgr.exe] [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
[PID: 1904][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] [RealNetworks, Inc., 0.1.0.3536]
[PID: 1224][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1428][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 3768][D:\QQ\QQ.exe] [TENCENT, 0, 0, 0, 0]
[D:\QQ\QQBaseClassInDll.dll] [, 1, 0, 0, 1]
[D:\QQ\QQHelperDll.dll] [, 1, 0, 0, 1]
[D:\QQ\BasicCtrlDll.dll] [Tencent, 5, 0, 200, 370]
[D:\QQ\QQAPI.dll] [, 1, 0, 0, 1]
[D:\QQ\TIMProxy.dll] [tencent, 0, 3, 2, 4]
[D:\QQ\LoginCtrl.dll] [, 1, 0, 0, 1]
[D:\QQ\npkcntc.dll] [INCA Internet Co., Ltd., 2006, 6, 27, 1]
[D:\QQ\npkpdb.dll] [INCA Internet Co., Ltd., 2003, 10, 1, 1]
[D:\QQ\QQRes.dll] [tencent, 1, 0, 0, 1]
[D:\QQ\QQMainFrame.dll] [N/A, N/A]
[D:\QQ\CQQApplication.dll] [N/A, N/A]
[D:\QQ\NewSkin.dll] [, 1, 0, 0, 1]
[D:\QQ\HostingMgr.dll] [, 1, 0, 0, 1]
[D:\QQ\CameraDll.dll] [, 1, 0, 0, 1]
[D:\QQ\MailSummary.dll] [, 1, 0, 0, 1]
[D:\QQ\QQSpace.dll] [, 1, 0, 0, 1]
[C:\WINDOWS\system32\msdmo.dll] [N/A, N/A]
[D:\QQ\QQGroupMng.dll] [, 1, 0, 0, 1]
[D:\QQ\GroupLive.dll] [N/A, N/A]
[D:\QQ\QQSysMsgMng.dll] [N/A, N/A]
[D:\QQ\QRingMng.dll] [N/A, N/A]
[D:\QQ\UserDefinedHead.dll] [, 1, 0, 0, 1]
[D:\QQ\QQPlugin.dll] [N/A, N/A]
[D:\QQ\QQConfigPlugin.dll] [, 1, 0, 0, 1]
[D:\QQ\PhoneAPI.dll] [, 1, 0, 0, 1]
[D:\QQ\DialerAllinOne.dll] [tencent, 1, 4, 0, 0]
[D:\QQ\VPortal.dll] [, 1, 0, 0, 4]
[D:\QQ\QQAllInOne.dll] [N/A, N/A]
[D:\QQ\SCCore.dll] [TENCENT, 2, 0, 0, 1]
[D:\QQ\LongConnection.dll] [tencent, 5, 0, 200, 160]
[D:\QQ\QQAvatar.dll] [N/A, N/A]
[D:\QQ\FlashAvatarDll.dll] [, 1, 4, 0, 1]
[D:\QQ\QQPet.dll] [, 1, 0, 0, 1]
[D:\QQ\QQCustomFace.dll] [N/A, N/A]
[C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,16,0]
[D:\QQ\QQSceneMng.dll] [N/A, N/A]
[D:\QQ\BQQApplication.dll] [N/A, N/A]
[D:\QQ\ShareFiles.dll] [N/A, N/A]
[D:\QQ\QQZip.dll] [tencent, 0, 3, 2, 4]
[D:\QQ\CommercesMng.dll] [, 1, 0, 0, 1]
[D:\QQ\PersonalDesktop.dll] [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
[D:\QQ\QQAddr.dll] [深圳市腾讯计算机系统有限公司, 5, 0, 101, 240]
[D:\QQ\GroupConnection.dll] [Tencent, 0, 3, 3, 5]
[D:\QQ\ImageOle.dll] [TODO: <Company name>, 1.0.0.1]
[D:\QQ\QQPhoneHelper.dll] [腾讯科技(深圳)有限公司, 2, 0, 6, 60]
[D:\QQ\QQFileTransfer.dll] [Tencent, 0, 3, 3, 5]
[D:\QQ\QQMagicFace.dll] [, 1, 0, 0, 1]
[PID: 3828][D:\QQ\TIMPlatform.exe] [tencent, 0, 3, 1, 8]
[D:\QQ\TIMProxy.dll] [tencent, 0, 3, 2, 4]
[PID: 1996][D:\QQ\QQMusic.exe] [Tencent, 6, 5, 202, 341]
[D:\QQ\TIMProxy.dll] [tencent, 0, 3, 2, 4]
[D:\QQ\VQQPLA~1.OCX] [Tencent Technology (Shenzhen) Company Limited, 2, 0, 101, 10]
[D:\QQ\vqqsdl.dll] [Tencent Technology (Shenzhen) Company Limited, 2, 1, 101, 10]
[D:\QQ\TNProxy.dll] [Tencent Technology(Shenzhen) Company Limited, 2, 1, 101, 10]
[C:\WINDOWS\system32\msdmo.dll] [N/A, N/A]
[E:\电影\TruePlayer\npdecx.dll] [BofulNetworks , 6, 0, 0, 1]
[PID: 3376][E:\瑞星杀毒\Rising\Rav\Rav.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 75]
[E:\瑞星杀毒\Rising\Rav\PlugIn\RsPgScan.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 17]
[E:\瑞星杀毒\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
[E:\瑞星杀毒\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11]
[E:\瑞星杀毒\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1]
[E:\瑞星杀毒\Rising\Rav\RavUI.Dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 65]
[E:\瑞星杀毒\Rising\Rav\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 26]
[E:\瑞星杀毒\Rising\Rav\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
[E:\瑞星杀毒\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[E:\瑞星杀毒\Rising\Rav\Scanner.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 33]
[E:\瑞星杀毒\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20]
[E:\瑞星杀毒\Rising\Rav\RavUIMsg.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 27]
[E:\瑞星杀毒\Rising\Rav\RsStore.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6]
[E:\瑞星杀毒\Rising\Rav\RavQu.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 17]
[E:\瑞星杀毒\Rising\Rav\libload.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 10]
[E:\瑞星杀毒\Rising\Rav\VirusLib.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
[PID: 3532][E:\瑞星杀毒\Rising\Rav\RsAgent.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 12]
[E:\瑞星杀毒\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1]
[PID: 2476][C:\WINDOWS\msagent\AgentSvr.exe] [Microsoft Corporation, 2.00.0.3424]
[PID: 3048][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\kakatool.dll] [Beijing Rising Technology Co., Ltd., 2, 0, 2, 1]
[PID: 2372][E:\xunlei\Program\Thunder5.exe] [Thunder Networking Technologies,LTD, 5.3.0.220]
[E:\xunlei\Program\UpdateDownload.dll] [Thunder Networking Technologies,LTD, 1, 0, 1, 8]
[E:\xunlei\Program\download_interface.dll] [Thunder Networking Technologies,LTD, 1, 0, 4, 71]
[E:\xunlei\Program\log4cplus.dll] [, 1, 0, 2, 1]
[E:\xunlei\Program\stlport_vc646.dll] [STLport Consulting, Inc., 4.6.2003.1031]
[E:\xunlei\Program\asyn_dns.dll] [N/A, N/A]
[E:\xunlei\Program\msgmanage.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 15]
[E:\xunlei\Program\historyinfo_manage.dll] [Thunder Networking Technologies,LTD, 5, 2, 0, 148]
[E:\xunlei\Program\RegisterDll.dll] [Thunder Networking Technologies,LTD, 2, 1, 0, 18]
[E:\xunlei\Program\FloatBar.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 2]
[E:\xunlei\Components\InMedia\iEmbedShell.dll] [ , 1, 0, 0, 11]
[E:\xunlei\Components\InMedia\iEmbed04.dll] [ , 2, 3, 0, 37]
[E:\xunlei\Components\P4PClient\P4PClient.dll] [Thunder Networking Technologies,LTD, 1, 0, 3, 8]
[E:\xunlei\Program\iTargetAd.dll] [Thunder Networking Technologies,LTD, 1, 0, 1, 55]
[C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,16,0]
[PID: 1472][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\kakatool.dll] [Beijing Rising Technology Co., Ltd., 2, 0, 2, 1]
[C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,16,0]
[PID: 3076][E:\杀\SREng\SREng.exe] [Smallfrogs Studio, 2.2.6.605]
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
218.65.34.6 pk.mir666.com
218.65.34.6 769web.mir666.com
218.65.34.6 web772.jsy666.com
218.65.34.6 b1.hxwg.cn
218.65.34.6 ww2.58cqsf.com
218.65.34.6 77ip.com
218.65.34.6 bywg2.gamescoco.com
218.65.34.6 bywg.gamescoco.com
218.65.34.6 bywg1.gamescoco.com
218.65.34.6 go.bczwg.com
218.65.34.6 go1.bczwg.com
218.65.34.6 go.babywg.net
218.65.34.6 go1.babywg.net
218.65.34.6 news.lovewg.com
218.65.34.6 www.4000sf.com
218.65.34.6 bywg.92095.com
218.65.34.6 news.jb123.com
==================================