+ 打印机监控
+ HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors
EPSON V6 Monitor4SA
[AM] 63. c:\windows\system32\ebpmon24.dll
Microsoft Document Imaging Writer Monitor
[AM] 64. c:\windows\system32\mdimon.dll
+ 其他自启动项目
+ C:\Documents and Settings\All Users\「开始」菜单\程序\启动
瑞星监控中心.lnk
[A ] 65. c:\program files\rising\rav\ravmon.exe
+ e:\autorun.inf
open
[A ] 66. e:\auto.exe
shellexecute
[A ] 66. e:\auto.exe
shell\Auto\command
[A ] 66. e:\auto.exe
+ f:\autorun.inf
open
[A ] 67. f:\auto.exe
shellexecute
[A ] 67. f:\auto.exe
shell\Auto\command
[A ] 67. f:\auto.exe
+ 正在运行的进程
+ 00000128(296) srt.exe
00400000[00160000]
[ M] 68. c:\program files\yc-a5\srt.exe
6BC40000[000FB000]
[ M] 69. c:\program files\yc-a5\mfc42.dll
25000000[00016000]
[ M] 70. c:\program files\netmeeting\ravmsmon.dat
10000000[00144000]
[ M] 71. c:\documents and settings\shijiahuihao\local settings\temp\hicard.dll
06020000[00028000]
[ M] 72. c:\program files\yc-a5\srt.dll
06060000[00008000]
[AM] 54. c:\windows\system32\xyupri0.dll
06070000[00009000]
[ M] 73. c:\windows\system32\diskman32.dll
+ 000001b4(436) MDM.EXE
00400000[0004D000]
[AM] 3. c:\program files\common files\microsoft shared\vs7debug\mdm.exe
51810000[00006000]
[ M] 74. c:\program files\common files\microsoft shared\vs7debug\2052\mdmui.dll
+ 0000022c(556) smss.exe
+ 00000270(624) csrss.exe
+ 00000288(648) winlogon.exe
72C80000[00008000]
[ M] 75. c:\windows\system32\msacm32.drv
+ 000002b4(692) services.exe
+ 000002c0(704) lsass.exe
+ 0000036c(876) svchost.exe
+ 0000039c(924) svchost.exe
+ 000003d4(980) svchost.exe
+ 00000408(1032) svchost.exe
+ 00000458(1112) svchost.exe
+ 00000540(1344) alg.exe
+ 00000594(1428) Explorer.EXE
10000000[00012000]
[AM] 53. c:\windows\system32\system.dat
00E60000[00008000]
[AM] 54. c:\windows\system32\xyupri0.dll
25000000[00016000]
[ M] 70. c:\program files\netmeeting\ravmsmon.dat
015C0000[00009000]
[ M] 73. c:\windows\system32\diskman32.dll
72C80000[00008000]
[ M] 75. c:\windows\system32\msacm32.drv
36D30000[0001A000]
[ M] 76. c:\program files\microsoft office\office11\mcps.dll
+ 000005f8(1528) spoolsv.exe
50400000[00015000]
[AM] 63. c:\windows\system32\ebpmon24.dll
009C0000[00008000]
[AM] 64. c:\windows\system32\mdimon.dll
009D0000[00008000]
[ M] 77. c:\windows\system32\spool\prtprocs\w32x86\mdippr.dll
+ 00000698(1688) RavStub.exe
00400000[00018000]
[AM] 57. c:\program files\rising\rav\ravstub.exe
10000000[0001B000]
[ M] 78. c:\program files\rising\rav\rscommx.dll
23700000[0001A000]
[ M] 79. c:\program files\rising\rav\rscommon.dll
+ 00000728(1832) gdisvc.exe
00400000[00014000]
[ M] 80. c:\windows\system32\gdisvc.exe
73390000[00154000]
[ M] 81. c:\windows\system32\msvbvm60.dll
+ 00000af8(2808) wuauclt.exe
+ 00000b40(2880) IEXPLORE.EXE
10000000[00017000]
[AM] 34. c:\program files\flashget\jccatch.dll
44800000[00020000]
[AM] 35. c:\program files\yahoo!\assistant\assist\yphtb.dll
39C00000[0002A000]
[AM] 36. c:\program files\yahoo!\assistant\assist\yangling.dll
44000000[0000E000]
[AM] 37. c:\program files\yahoo!\assistant\assist\ydragsearch.dll
00E20000[00029000]
[AM] 38. c:\program files\flashget\getflash.dll
45400000[0003C000]
[AM] 39. c:\program files\yahoo!\assistant\assist\yflashdl.dll
3B000000[00017000]
[AM] 40. c:\program files\yahoo!\assistant\assist\yassist.dll
+ 00000bbc(3004) regin.exe
00400000[0000B000]
[ M] 82. c:\program files\common files\microsoft shared\vgx\regin.exe
73390000[00154000]
[ M] 81. c:\windows\system32\msvbvm60.dll
+ 00000c64(3172) Ras.exe
00400000[00160000]
[ M] 83. c:\program files\rising\antispyware\ras.exe
10000000[00013000]
[ M] 84. c:\program files\rising\antispyware\topsoft.dll
7C140000[00103000]
[ M] 85. c:\program files\rising\antispyware\mfc71.dll
7C340000[00056000]
[ M] 86. c:\program files\rising\antispyware\msvcr71.dll
7C3A0000[0007B000]
[ M] 87. c:\program files\rising\antispyware\msvcp71.dll
5D360000[0000A000]
[ M] 88. c:\windows\system32\mfc71chs.dll
25000000[00016000]
[ M] 70. c:\program files\netmeeting\ravmsmon.dat
00D70000[000BD000]
[ M] 89. c:\program files\rising\antispyware\rasgui.dll
01300000[00008000]
[AM] 54. c:\windows\system32\xyupri0.dll
014C0000[00009000]
[ M] 73. c:\windows\system32\diskman32.dll
016B0000[0002F000]
[ M] 90. c:\program files\rising\antispyware\engine.dll
017F0000[00012000]
[ M] 91. c:\program files\rising\antispyware\zip.dll
