7EDC34128127} <D:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[AUDIO__X_MS_WMA Moniker Class]
{CD3AFA84-B84F-48F0-9393-7EDC34128127} <D:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[VIDEO__MPEG Moniker Class]
{CD3AFA89-B84F-48F0-9393-7EDC34128127} <D:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[VIDEO__X_MS_ASF Moniker Class]
{CD3AFA8F-B84F-48F0-9393-7EDC34128127} <D:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[RealPlayer G2 Control]
{CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <D:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
[Shockwave Flash
Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <D:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[QuickTimeCheck Class]
{DE4AF3B0-F4D4-11D3-B41A-0050DA2E6C21} <D:\Program Files\Ringz Studio\Storm Codec\QTSystem\QTCheck.ocx, Apple Computer, Inc.>
[]
{E1771B7F-98BE-407F-BA67-AA16ADA5D0C5} <D:\PROGRA~1\MSNMES~1\MSGSC8~1.DLL, Microsoft Corporation>
[Rising Web Scan
Object]
{E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <D:\WINDOWS\Downloaded Program Files\OL2005.dll, Beijing Rising Technology Co., Ltd.>
[CPasswordEditCtrl
Object]
{E787FD25-8D7C-4693-AE67-9406BC6E22DF} <D:\WINDOWS\system32\qqedit\qqedit.dll, 腾讯科技（深圳）有限公司>
[XML HTTP Request]
{ED8C108E-4349-11D2-91A4-00C04F7969E8} <%SystemRoot%\system32\msxml3.dll, N/A>
[KvScanOnline Control]
{EF6205C1-3F17-4829-BCB5-1336ED89E356} <D:\WINDOWS\KVSCAN~1\KvDown.ocx, dreamersoft>
[XML DOM Document 3.0]
{F5078F32-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\system32\msxml3.dll, N/A>
[XML HTTP 3.0]
{F5078F35-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\system32\msxml3.dll, N/A>
[XML DOM Document]
{F6D90F11-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\system32\msxml3.dll, N/A>
[XML HTTP]
{F6D90F16-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\system32\msxml3.dll, N/A>
[]
{FB7199AB-79BF-11D2-8D94-0000F875C541} <D:\Program Files\Messenger\msgsc.dll, Microsoft Corporation>
[&使用迅雷下载]
<C:\DownLoad\Thunder\Program\geturl.htm, N/A>
[&使用迅雷下载全部链接]
<C:\DownLoad\Thunder\Program\getallurl.htm, N/A>
[Add to Windows &Live Favorites]
<http://favorites.live.com/quickadd.aspx, N/A>
[上传到QQ网络硬盘]
<D:\Documents and Settings\lailai\My Documents\wxy\wan\qq\AddToNetDisk.htm, N/A>
[使用网际快车下载]
<C:\DownLoad\flashget\jc_link.htm, N/A>
[使用网际快车下载全部链接]
<C:\DownLoad\flashget\jc_all.htm, N/A>
[导出到 Microsoft Office Excel(&X)]
<res://D:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
[添加到QQ自定义面板]
<D:\Documents and Settings\lailai\My Documents\wxy\wan\qq\AddPanel.htm, N/A>
[添加到QQ表情]
<D:\Documents and Settings\lailai\My Documents\wxy\wan\qq\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<D:\Documents and Settings\lailai\My Documents\wxy\wan\qq\SendMMS.htm, N/A>
[用比特精灵下载(&B)]
<E:\Tools\BitSpirit\bsurl.htm, N/A>
==================================
正在运行的进程
[PID: 556][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 644][\??\D:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 668][\??\D:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\system32\winlib .dll] [N/A, N/A]
[PID: 712][D:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 724][D:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 880][D:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 976][D:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1072][D:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1124][D:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1180][D:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1440][D:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\system32\mngmh.dll] [N/A, N/A]
[D:\Program Files\JiangMin\AntiVirus\KVshell.dll] [Jiangmin Co.Ltd, 1, 0, 7, 201]
[D:\WINDOWS\system32\HiveBase.dll] [Jiangmin Co., Ltd., 1, 0, 6, 1227]
[D:\Program Files\JiangMin\AntiVirus\lang\kvxp0804.lng] [N/A, N/A]
[D:\Program Files\WinRAR\rarext.dll] [N/A, N/A]
[D:\Program Files\JiangMin\common\GUIEXT.DLL] [Jiangmin Co.Ltd, 1, 0, 6, 1201]
[D:\Program Files\JiangMin\common\lang\guiext0804.lng] [JiangMin Ltd., 7, 1, 0, 200]
[D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 8.0.0.2006102200]
[D:\PROGRA~1\baidu\bar\BaiduBar.dll] [Baidu.com, Inc., 2, 0, 2, 106]
[C:\DownLoad\Thunder\ComDlls\XunLeiBHO_006.dll] [Thunder Networking Technologies,LTD, 5, 0, 0, 3]
[D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll] [Adobe Systems, Inc., 8.0.0.0]
[D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.CHS] [Adobe Systems, Inc., 8.0.0.0]
[PID: 1572][D:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
[D:\WINDOWS\system32\EBPMON2.DLL] [SEIKO EPSON CORPORATION, 2, 16, 0, 0]
[PID: 1904][D:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 428][D:\Program Files\JiangMin\AntiVirus\KVWSC.exe] [Jiangmin Co.,Ltd, 1, 0, 6, 919]
[D:\Program Files\JiangMin\Kernel\EngFace.dll] [Jiangmin Co., Ltd., 2, 0, 7, 412]
[D:\WINDOWS\system32\HiveBase.dll] [Jiangmin Co., Ltd., 1, 0, 6, 1227]
[PID: 456][D:\WINDOWS\system32\nvsvc32.exe] [NVIDIA Corporation, 6.14.10.8198]
[PID: 472][D:\WINDOWS\system32\oodag.exe] [O&O Software GmbH, 8.6.2336]
[D:\WINDOWS\system32\OODAGRS.DLL] [O&O Software GmbH, 8.0.1.2560]
[PID: 908][D:\Program Files\JiangMin\AntiVirus\kvsrvxp.exe] [Jiangmin Co., Ltd., 10, 0, 7, 205]
[D:\WINDOWS\system32\HiveBase.dll] [Jiangmin Co., Ltd., 1, 0, 6, 1227]
[D:\Program Files\JiangMin\AntiVirus\SvcSafe.dll] [Jiangmin Co., Ltd., 10, 0, 7, 129]
[D:\Program Files\JiangMin\AntiVirus\lang\SvcSafe0804.lng] [N/A, N/A]
[D:\Program Files\JiangMin\Kernel\Scan.dll] [Jiangmin Co., Ltd., 2.0.7.119]
[D:\Program Files\JiangMin\Kernel\EngFace.dll] [Jiangmin Co., Ltd., 2, 0, 7, 412]
[D:\Program Files\JiangMin\KVOL\autoUpdate.dll] [Jiangmin Co.Ltd, 1, 0, 7, 3291]
[D:\Program Files\JiangMin\AntiVirus\FileGuard.dll] [Jiangmin Co., Ltd., 1, 0, 6, 803]
[D:\Program Files\JiangMin\AntiVirus\FileGuardNT.dll] [Jiangmin Co., Ltd., 10, 2, 7, 122]
[D:\Program Files\JiangMin\AntiVirus\NetGuard.dll] [Jiangmin Co., Ltd., 1, 0, 7, 130]
[D:\Program Files\JiangMin\common\KvTxd.dll] [Jiangmin Co., Ltd., 10.0.6.1106]
[PID: 2036][D:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2456][D:\WINDOWS\system32\wscntfy.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\Program Files\JiangMin\AntiVirus\kvxp.kxp] [Jiangmin Co.,Ltd, 1, 0, 7, 124]
[D:\WINDOWS\system32\HiveBase.dll] [Jiangmin Co., Ltd., 1, 0, 6, 1227]
[D:\Program Files\JiangMin\AntiVirus\kvxpuw.dll] [Jiangmin Co.,Ltd, 1, 0, 7, 124]
[D:\Program Files\JiangMin\AntiVirus\lang\kvxp0804.lng] [N/A, N/A]
[D:\Program Files\JiangMin\common\GUIEXT.DLL] [Jiangmin Co.Ltd, 1, 0, 6, 1201]
[D:\Program Files\JiangMin\common\lang\guiext0804.lng] [JiangMin Ltd., 7, 1, 0, 200]
[D:\Program Files\JiangMin\AntiVirus\KvInterpreter.dll] [Jiangmin Co., Ltd., 10, 0, 6, 1225]
[D:\Program Files\JiangMin\Kernel\EngFace.dll] [Jiangmin Co., Ltd., 2, 0, 7, 412]
[D:\Program Files\JiangMin\Kernel\Scan.dll] [Jiangmin Co., Ltd., 2.0.7.119]
[D:\Program Files\JiangMin\Kernel\Fix.dll] [Jiangmin Co., Ltd., 10, 0, 7, 320]
[D:\Program Files\JiangMin\AntiVirus\ScanSet.dll] [Jiangmin Co., Ltd., 1, 0, 6, 1019]
[D:\Program Files\JiangMin\AntiVirus\lang\scanset0804.lng] [Jiangmin Co., Ltd., 1, 0, 6, 1019]
[PID: 3256][D:\Program Files\Opera\Opera.exe] [Opera Software, 8771]
[D:\Program Files\Opera\Opera.dll] [Opera Software, 8771]
[PID: 1660][D:\DOCUME~1\lailai\LOCALS~1\Temp\ThunderBird.exe] [, 1, 2, 5, 8]
[PID: 2656][D:\Documents and Settings\lailai\My Documents\xiaoli\服务器问题查看软件\sreng2\SREng.EXE] [Smallfrogs Studio, 2.3.13.690]
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["D:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1 localhost
==================================
API HOOK
N/A
==================================
[/CODE]
