各位大侠帮我看看到底怎么回事
我的进程里有图片里的几个SPL00SV SVCH0ST Explorer.EXE这三个病毒进程
开始的时候所有的EXE文件被破坏，用新版瑞星杀毒成功，后来又出现于是重装。
重装后又出现，用瑞星最新版杀不掉 3721返间谍专家 木马剑客也杀不掉
重装系统只要联网又会出现 除了我必须的资料 把所有的盘格式化后也会出现 我保存的资料都是OFFICE 和视频 资料
我的是笔记本电脑，又一次我发现装了自带的一个功能软件（不是必须）后马上就会出现病毒，但我格盘后不装这个也会出现病毒

[用户系统信息]Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; TencentTraveler )

谢谢楼上的了！我马上去下！感激！

启动项目


注册表

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
(ctfmon.exe)(C:\WINDOWS\system32\ctfmon.exe) [(Verified)Microsoft Windows Publisher]
(bgswitch)(C:\WINDOWS\system32\bgswitch.exe) []
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
(load)() [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
(RavTask)("F:\瑞星\Rising\Rav\RavTask.exe" -system) [(Verified)Beijing Rising Science and Technology Corporation Limited]
(RTHDCPL)(RTHDCPL.EXE) [(Verified)Microsoft Windows Hardware Compatibility Publisher]
(Alcmtr)(ALCMTR.EXE) [(Verified)Microsoft Windows Hardware Compatibility Publisher]
(AzMixerSel)(C:\Program Files\Realtek\InstallShield\AzMixerSel.exe) [Realtek Semiconductor Corp.]
(ATICCC)("C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay) [N/A]
(RfwMain)("F:\瑞星防火墙\Rising\Rfw\rfwmain.exe" -Startup) [(Verified)Beijing Rising Science and Technology Corporation Limited]
(Storm2Set)(C:\WINDOWS\system32\rundll32.exe "C:\PROGRA~1\StormII\StormSet.dll",CheckEnv) [(Verified)Beijing Baofeng Inc.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
(shell)(Explorer.exe) [(Verified)Microsoft Windows Publisher]
(Userinit)(C:\WINDOWS\system32\userinit.exe,) [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
(AppInit_DLLs)() [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
(UIHost)(logonui.exe) [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
({32CD708B-60A7-4C00-9377-D73EAA495F0F})(C:\WINDOWS\system32\RavExt.dll) [(Verified)Beijing Rising Science and Technology Corporation Limited]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\){26923b43-4d38-484f-9b9e-de460746276c}]
(Internet Explorer)(%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE) [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\){881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
(Outlook Express)(%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE) [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
(Themes Setup)(%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll) [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
(Microsoft Outlook Express 6)("%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install) [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
(NetMeeting 3.01)(rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT) [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
(Microsoft Windows Media Player)(rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp10.inf,PerUserStub) [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
(通讯簿 6)("%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install) [N/A]




--------------------------------------------------------------------------------



启动文件夹

[QQ游戏启动加速程序]
(C:\Documents and Settings\Administrator.11F561D4A74B4CA\「开始」菜单\程序\启动\QQ游戏启动加速程序.lnk --) F:\qq游戏\QQGAME\Accel.exe [深圳市腾讯计算机系统有限公司])(N)

服务

[Ati HotKey Poller / Ati HotKey Poller][Running/Auto Start]
(C:\WINDOWS\system32\Ati2evxx.exe)(ATI Technologies Inc.)
[Human Interface Device Access / HidServ][Stopped/Disabled]
(C:\WINDOWS\System32\svchost.exe -k netsvcs--)%SystemRoot%\System32\hidserv.dll)(N/A)
[Rising Proxy Service / RfwProxySrv][Running/Auto Start]
(f:\瑞星防火墙\rising\rfw\rfwproxy.exe)(Beijing Rising Technology Co., Ltd.)
[Rising Personal Firewall Service / RfwService][Running/Auto Start]
(f:\瑞星防火墙\rising\rfw\rfwsrv.exe)(Beijing Rising Technology Co., Ltd.)
[Rising Process Communication Center / RsCCenter][Running/Auto Start]
("F:\瑞星\Rising\Rav\CCenter.exe")(Beijing Rising Technology Co., Ltd.)
[Rising RealTime Monitor / RsRavMon][Running/Auto Start]
("F:\瑞星\RISING\RAV\Ravmond.exe")(Beijing Rising Technology Co., Ltd.)



--------------------------------------------------------------------------------



驱动程序

[ati2mtag / ati2mtag][Running/Manual Start]
(system32\DRIVERS\ati2mtag.sys)(ATI Technologies Inc.)
[Broadcom NetXtreme Gigabit Ethernet / b57w2k][Running/Manual Start]
(system32\DRIVERS\b57xp32.sys)(Broadcom Corporation)
[Microsoft UAA Bus Driver for High Definition Audio / HDAudBus][Running/Manual Start]
(system32\DRIVERS\HDAudBus.sys)(Windows (R) Server 2003 DDK provider)
[HookCont / HookCont][Running/System Start]
(\SystemRoot\system32\drivers\HookCont.sys)(Beijing Rising Technology Co., Ltd)
[HookNtos / HookNtos][Running/System Start]
(\SystemRoot\system32\drivers\HookNtos.sys)(Beijing Rising Technology Co., Ltd)
[HookReg / HookReg][Running/System Start]
(\SystemRoot\system32\drivers\HookReg.sys)(Beijing Rising Technology Co., Ltd)
[HookSys / HookSys][Running/System Start]
(\SystemRoot\system32\drivers\HookSys.sys)(Beijing Rising Technology Co., Ltd)
[HookUrl / HookUrl][Running/Auto Start]
(\??\F:\瑞星防火墙\Rising\Rfw\HookUrl.sys)(Beijing Rising Technology Co., Ltd.)
[Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Running/Manual Start]
(system32\drivers\RtkHDAud.sys)(Realtek Semiconductor Corp.)
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
(system32\DRIVERS\ptilink.sys)(Parallel Technologies, Inc.)
[Rising Rfwbase Driver / RfwBase][Running/System Start]
(System32\DRIVERS\rfwbase.SYS)(Beijing Rising Technology Co., Ltd.)
[RsFwDrv / RsFwDrv][Running/System Start]
(\??\F:\瑞星防火墙\Rising\Rfw\RsFwDrv.sys)(Beijing Rising Technology Co., Ltd.)
[RsNTGDI / RsNTGDI][Running/Boot Start]
(\SystemRoot\system32\Drivers\RsNTGdi.sys)(Beijing Rising Technology Co., Ltd.)
[Secdrv / Secdrv][Stopped/Manual Start]
(system32\DRIVERS\secdrv.sys)(N/A)

浏览器加载项

[ThunderAtOnce Class]
{01443AEC-0FD1-40fd-9C87-E93D1494C233} (F:\迅雷\ComDlls\TDAtOnce_Now.dll, Thunder Networking Technologies,LTD)
[Thunder Browser Helper]
{889D2FEB-5411-4565-8998-1DD2C5261283} (F:\迅雷\ComDlls\xunleiBHO_Now.dll, Thunder Networking Technologies,LTD)
[启动迅雷5]
{09BA8F6D-CB54-424B-839C-C2A6C8E6B436} (F:\迅雷\Thunder.exe, Thunder Networking Technologies,LTD)
[番茄花园]
{6096E38F-5AC1-4391-8EC4-75DFA92FB32F} (http://www.tomatolei.com, N/A)
[iTrusPTA Class]
{1E0DFFCF-27FF-4574-849B-55007349FEDA} (C:\WINDOWS\system32\aliedit\pta.dll, )
[ThunderAtOnce Class]
{01443AEC-0FD1-40FD-9C87-E93D1494C233} (F:\迅雷\ComDlls\TDAtOnce_Now.dll, Thunder Networking Technologies,LTD)
[Thunder Agent Class]
{485463B7-8FB2-4B3B-B29B-8B919B0EACCE} (F:\迅雷\ComDlls\ThunderAgent_Now.dll, Thunder Networking Technologies,LTD)
[XMP Class]
{6483F145-A768-4C41-AACC-52D4D7845851} (C:\Documents and Settings\All Users.WINDOWS\Application Data\Thunder Network\KanKan\xplayer.dll_1_work, )
[XDRM]
{693571CB-54A3-4E90-9D52-EEAE1334E2D3} (C:\Documents and Settings\All Users.WINDOWS\Application Data\Thunder Network\KanKan\xdrm.dll_1_work, )
[Windows Media Player]
{6BF52A52-394A-11D3-B153-00C04F79FAA6} (C:\WINDOWS\system32\wmp.dll, Microsoft Corporation)
[MediaComm Class]
{7670648D-461B-42AF-BDFE-46D26AF5EFF2} (F:\迅雷\Components\InMedia\MediaAddin14.dll, Thunder Networking Technologies,LTD)
[Thunder Browser Helper]
{889D2FEB-5411-4565-8998-1DD2C5261283} (F:\迅雷\ComDlls\xunleiBHO_Now.dll, Thunder Networking Technologies,LTD)
[RMGetLicense Class]
{A9FC132B-096D-460B-B7D5-1DB0FAE0C062} (C:\WINDOWS\system32\msnetobj.dll, Microsoft Corporation)
[Microsoft Scriptlet Component]
{AE24FDAE-03C6-11D1-8B76-0080C744F389} (C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation)
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} (C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.)
[Thunder DapPlayer]
{EEDD6FF9-13DE-496B-9A1C-D78B3215E266} (F:\迅咐雷譢\Components\DownAndPlay\DapPlayer3.0.35.59.dll, N/A)
[XPPlayer Class]
{F3E70CEA-956E-49CC-B444-73AFE593AD7F} (C:\Documents and Settings\All Users.WINDOWS\Application Data\Thunder Network\KanKan\pplayer.dll_1_work, Thunder)
[使用迅雷下载]
(F:\迅雷\Program\GetUrl.htm, N/A)
[使用迅雷下载全部链接]
(F:\迅雷\Program\GetAllUrl.htm, N/A)
[导出到 Microsoft Office Excel(&X)]
(res://F:\office\MICROS~1\OFFICE11\EXCEL.EXE/3000, N/A)



--------------------------------------------------------------------------------

正在运行的进程

[PID: 604 / SYSTEM][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 664 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[f:\瑞星防火墙\rising\rfw\ijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.8]
[f:\瑞星防火墙\rising\rfw\olemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.3]
[PID: 696 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\Ati2evxx.dll] [ATI Technologies Inc., 6.14.10.4124]
[f:\瑞星防火墙\rising\rfw\ijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.8]
[f:\瑞星防火墙\rising\rfw\olemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.3]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 740 / SYSTEM][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[f:\瑞星防火墙\rising\rfw\ijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.8]
[f:\瑞星防火墙\rising\rfw\olemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.3]
[PID: 752 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[f:\瑞星防火墙\rising\rfw\ijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.8]
[f:\瑞星防火墙\rising\rfw\olemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.3]
[PID: 928 / SYSTEM][C:\WINDOWS\system32\Ati2evxx.exe] [ATI Technologies Inc., 6.14.10.4124]
[C:\WINDOWS\system32\Ati2edxx.dll] [ATI Technologies, Inc., 6, 14, 10, 2499]
[f:\瑞星防火墙\rising\rfw\ijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.8]
[f:\瑞星防火墙\rising\rfw\olemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.3]
[PID: 940 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[f:\瑞星防火墙\rising\rfw\ijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.8]
[f:\瑞星防火墙\rising\rfw\olemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.3]
[PID: 1020 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[f:\瑞星防火墙\rising\rfw\ijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.8]
[f:\瑞星防火墙\rising\rfw\olemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.3]
[PID: 1120 / SYSTEM][F:\瑞星\Rising\Rav\CCenter.exe] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 27]

f:\瑞星防火墙\rising\rfw\ijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.8]
[f:\瑞星防火墙\rising\rfw\olemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.3]
[PID: 1136 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[f:\瑞星防火墙\rising\rfw\ijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.8]
[f:\瑞星防火墙\rising\rfw\olemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.3]
[C:\WINDOWS\system32\wups2.dll] [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)]
[PID: 1216 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[f:\瑞星防火墙\rising\rfw\ijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.8]
[f:\瑞星防火墙\rising\rfw\olemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.3]
[PID: 1272 / SYSTEM][f:\瑞星防火墙\rising\rfw\rfwsrv.exe] [Beijing Rising Technology Co., Ltd., 7.0.0.45]
[C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[F:\瑞星防火墙\Rising\Rfw\ProcCom.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
[f:\瑞星防火墙\rising\rfw\RsCommX2.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
[f:\瑞星防火墙\rising\rfw\RSAPPMGR.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.0]
[f:\瑞星防火墙\rising\rfw\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.10]
[f:\瑞星防火墙\rising\rfw\RfwRule.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.13]
[f:\瑞星防火墙\rising\rfw\rfwlog.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.12]
[f:\瑞星防火墙\rising\rfw\Rfwdrv.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.37]
[f:\瑞星防火墙\rising\rfw\psapi.dll] [Microsoft Corporation, 4.00]
[f:\瑞星防火墙\rising\rfw\ijt_ctrl.dll] [Beijing Rising Technology Co., Ltd., 7, 0, 0, 0]
[f:\瑞星防火墙\rising\rfw\ijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.8]
[f:\瑞星防火墙\rising\rfw\unvdet.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.5]
[f:\瑞星防火墙\rising\rfw\olemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.3]
[f:\瑞星防火墙\rising\rfw\mPorts.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.3]
[PID: 1472 / SYSTEM][f:\瑞星防火墙\rising\rfw\rfwproxy.exe] [Beijing Rising Technology Co., Ltd., 7.0.0.25]
[C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[f:\瑞星防火墙\rising\rfw\psapi.dll] [Microsoft Corporation, 4.00]
[F:\瑞星防火墙\Rising\Rfw\ProcCom.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
[f:\瑞星防火墙\rising\rfw\RsCommX2.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
[f:\瑞星防火墙\rising\rfw\ijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.8]
[f:\瑞星防火墙\rising\rfw\olemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.3]
[f:\瑞星防火墙\rising\rfw\RfwRule.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.13]
[f:\瑞星防火墙\rising\rfw\MonMid.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.4]
[PID: 1724 / SYSTEM][f:\瑞星防火墙\rising\rfw\rfwstub.exe] [Beijing Rising Technology Co., Ltd., 7.0.0.9]
[C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[f:\瑞星防火墙\rising\rfw\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16]
[PID: 196 / Administrator][C:\WINDOWS\system32\Ati2evxx.exe] [ATI Technologies Inc., 6.14.10.4124]
[C:\WINDOWS\system32\Ati2edxx.dll] [ATI Technologies, Inc., 6, 14, 10, 2499]
[C:\WINDOWS\system32\ati2evxx.dll] [ATI Technologies Inc., 6.14.10.4124]
[PID: 252 / Administrator][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.16]
[C:\Program Files\WinRAR\rarext.dll] [N/A, ]
[F:\瑞星\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16]
[F:\迅雷\ComDlls\TDAtOnce_Now.dll] [Thunder Networking Technologies,LTD, 1.0.5.16]
[F:\迅雷\ComDlls\xunleiBHO_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 8, 44]
[F:\迅雷\Components\ResWorker\DsBho_00.dll] [, 1, 0, 0, 12]
[F:\迅雷\Components\ResWorker\DataProcessor_00.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 13]
[F:\office\MicrosoftOffice2003wmb\OFFICE11\msohev.dll] [Microsoft Corporation, 11.0.5510]
[C:\Program Files\ATI Technologies\ATI.ACE\atiacmxx.dll] [, 1, 0, 0, 1]
[PID: 300 / Administrator][f:\瑞星防火墙\rising\rfw\RfwMain.exe] [Beijing Rising Technology Co., Ltd., 7.0.1.32]
[C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[f:\瑞星防火墙\rising\rfw\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 79]
[F:\瑞星防火墙\Rising\Rfw\ProcCom.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
[f:\瑞星防火墙\rising\rfw\RsCommX2.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
[f:\瑞星防火墙\rising\rfw\RSAPPMGR.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.0]
[f:\瑞星防火墙\rising\rfw\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.10]
[f:\瑞星防火墙\rising\rfw\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16]
[f:\瑞星防火墙\rising\rfw\RfwCtrl.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.7]
[f:\瑞星防火墙\rising\rfw\RsXML.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 0]
[f:\瑞星防火墙\rising\rfw\PngDll.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 3]
[f:\瑞星防火墙\rising\rfw\RfwRule.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.13]
[PID: 460 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]

[f:\瑞星防火墙\rising\rfw\ijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.8]
[f:\瑞星防火墙\rising\rfw\olemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.3]
[PID: 1080 / Administrator][F:\瑞星\Rising\Rav\RavTask.exe] [Beijing Rising Technology Co., Ltd., 20.0.0.20]
[F:\瑞星\Rising\Rav\ProcCom.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
[F:\瑞星\Rising\Rav\RsCommX2.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
[F:\瑞星\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16]
[F:\瑞星\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 20.0.0.0]
[F:\瑞星\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.10]
[PID: 1096 / Administrator][C:\WINDOWS\RTHDCPL.EXE] [Realtek Semiconductor Corp., 2.0.4.2]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 1412 / Administrator][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1524 / LOCAL SERVICE][C:\WINDOWS\system32\wdfmgr.exe] [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
[PID: 756 / Administrator][C:\WINDOWS\system32\taskmgr.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2272 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2556 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 3248 / Administrator][C:\WINDOWS\system32\wuauclt.exe] [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)]
[C:\WINDOWS\system32\wups2.dll] [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)]
[PID: 3400 / Administrator][F:\瑞星\Rising\Rav\RsAgent.exe] [Beijing Rising Technology Co., Ltd., 20.0.0.7]
[C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[F:\瑞星\Rising\Rav\ProcCom.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
[F:\瑞星\Rising\Rav\RsCommX2.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
[PID: 3420 / Administrator][C:\WINDOWS\msagent\AgentSvr.exe] [Microsoft Corporation, 2.00.0.3424]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 3872 / Administrator][F:\瑞星\Rising\Rav\RAV.EXE] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 54]
[F:\瑞星\Rising\Rav\ProcCom.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
[F:\瑞星\Rising\Rav\RsCommX2.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
[F:\瑞星\Rising\Rav\Rsguilib.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 79]
[C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[F:\瑞星\Rising\Rav\RsXML.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 0]
[F:\瑞星\Rising\Rav\PngDll.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 3]
[F:\瑞星\Rising\Rav\RsCommon.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16]
[F:\瑞星\Rising\Rav\ravpagem.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.70]
[F:\瑞星\Rising\Rav\htmllib.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.12]
[C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.16]
[F:\瑞星\Rising\Rav\ravpagew.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 1, 73]
[F:\瑞星\Rising\Rav\RSAPPMGR.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.0]
[F:\瑞星\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.10]
[F:\瑞星\Rising\Rav\fakescan.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.13]
[F:\瑞星\Rising\Rav\Scanner.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.33]
[F:\瑞星\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.4]
[F:\瑞星\Rising\Rav\SysMail.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.10]
[F:\瑞星\Rising\Rav\monrule.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.24]
[PID: 3884 / SYSTEM][F:\瑞星\RISING\RAV\Ravmond.exe] [Beijing Rising Technology Co., Ltd., 20.0.0.59]
[F:\瑞星\RISING\RAV\BWList.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.4]
[C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[f:\瑞星防火墙\rising\rfw\ijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.8]
[f:\瑞星防火墙\rising\rfw\olemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.3]
[F:\瑞星\RISING\RAV\RSAPPMGR.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.0]
[F:\瑞星\RISING\RAV\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.10]
[F:\瑞星\RISING\RAV\RsLog.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.27]
[F:\瑞星\RISING\RAV\ProcCom.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
[F:\瑞星\RISING\RAV\RsCommX2.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
[F:\瑞星\RISING\RAV\MonRule.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.24]
[F:\瑞星\RISING\RAV\Hooksys.dll] [Beijing Rising Technology Co., Ltd, 22, 0, 0, 7]
[F:\瑞星\RISING\RAV\HookReg.dll] [Beijing Rising Technology Co., Ltd, 22, 0, 0, 2]
[F:\瑞星\RISING\RAV\HookNtos.dll] [Beijing Rising Technology Co., Ltd, 22, 0, 0, 2]
[F:\瑞星\RISING\RAV\rswalmon.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 20]
[F:\瑞星\Rising\Rav\RsStore.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.8]
[F:\瑞星\RISING\RAV\HookCont.dll] [Beijing Rising Technology Co., Ltd, 22, 0, 0, 1]
[F:\瑞星\Rising\Rav\fakescan.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.13]
[F:\瑞星\Rising\Rav\Scanner.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.33]
[F:\瑞星\Rising\Rav\recomp.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16]
[F:\瑞星\Rising\Rav\refs.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 7]
[F:\瑞星\Rising\Rav\viruslib.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 14]
[F:\瑞星\Rising\Rav\relibldr.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 11]
[F:\瑞星\RISING\RAV\HookWeb.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.2]
[F:\瑞星\Rising\Rav\ffr.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 9]
[F:\瑞星\Rising\Rav\nvfile.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 3]
[F:\瑞星\Rising\Rav\scanexec.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 11]
[F:\瑞星\Rising\Rav\unexe.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 4]
[F:\瑞星\Rising\Rav\scanex.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 17]
[F:\瑞星\Rising\Rav\pearc.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 4]
[F:\瑞星\Rising\Rav\scanpack.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 5]
[F:\瑞星\Rising\Rav\revm.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 7]
[F:\瑞星\Rising\Rav\uroutine.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 18]
[F:\瑞星\Rising\Rav\scansct.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 6]
[F:\瑞星\Rising\Rav\scriptci.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 2]
[PID: 3912 / Administrator][F:\瑞星\Rising\Rav\RAVMON.EXE] [Beijing Rising Technology Co., Ltd., 20.0.0.98]
[C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[F:\瑞星\Rising\Rav\ProcCom.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
[F:\瑞星\Rising\Rav\RsCommX2.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
[F:\瑞星\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16]
[F:\瑞星\Rising\Rav\recomp.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16]
[F:\瑞星\Rising\Rav\refs.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 7]
[F:\瑞星\Rising\Rav\viruslib.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 14]
[F:\瑞星\Rising\Rav\relibldr.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 11]
[F:\瑞星\Rising\Rav\RSAPPMGR.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.0]
[F:\瑞星\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.10]

[F:\瑞星\Rising\Rav\MonRule.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.24]
[F:\瑞星\Rising\Rav\PngDll.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 3]
[F:\瑞星\Rising\Rav\Rsguilib.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 79]
[F:\瑞星\Rising\Rav\RsXML.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 0]
[PID: 3840 / SYSTEM][F:\瑞星\RISING\RAV\RavStub.exe] [Beijing Rising Technology Co., Ltd., 20.0.0.9]
[f:\瑞星防火墙\rising\rfw\ijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.8]
[f:\瑞星防火墙\rising\rfw\olemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.3]
[F:\瑞星\RISING\RAV\ProcCom.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
[F:\瑞星\RISING\RAV\RsCommX2.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
[F:\瑞星\RISING\RAV\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16]
[PID: 2212 / Administrator][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[F:\迅雷\ComDlls\TDAtOnce_Now.dll] [Thunder Networking Technologies,LTD, 1.0.5.16]
[F:\迅雷\ComDlls\xunleiBHO_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 8, 44]
[F:\迅雷\Components\ResWorker\DsBho_00.dll] [, 1, 0, 0, 12]
[F:\迅雷\Components\ResWorker\DataProcessor_00.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 13]
[F:\office\MicrosoftOffice2003wmb\OFFICE11\msohev.dll] [Microsoft Corporation, 11.0.5510]
[F:\瑞星\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 3]
[C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,16,0]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL] [Microsoft Corporation, 11.0.5510]
[C:\WINDOWS\system32\SOGOUPY.IME] [Sohu.com Inc., 3, 0, 0, 0]
[C:\Program Files\SogouInput\Plugin\SgImeWord.dll] [, 1, 0, 0, 31]
[PID: 1456 / Administrator][F:\qq\LYZYQQ\QQ\TIMPlatform.exe] [TENCENT, 7,0,365,1701]
[F:\qq\LYZYQQ\QQ\TIMProxy.dll] [tencent, 0, 3, 2, 4]
[PID: 172 / Administrator][C:\Program Files\Tencent\TT\TTraveler.exe] [Tencent, 3, 8, 308, 201]
[C:\Program Files\Tencent\TT\Plugins\QQFloatBar\QQFloatBar4TT2.dll] [腾讯公司, 1, 1, 0, 5]
[C:\Program Files\Tencent\TT\Plugins\TWeather\TWeather.dll] [, 1, 0, 0, 3]
[F:\瑞星\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 3]
[C:\Program Files\Tencent\TT\TTNetFavor.dll] [N/A, ]
[C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,16,0]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\system32\SOGOUPY.IME] [Sohu.com Inc., 3, 0, 0, 0]
[C:\Program Files\SogouInput\Plugin\SgImeWord.dll] [, 1, 0, 0, 31]
[PID: 2728 / Administrator][f:\瑞星防火墙\rising\rfw\RfwCfg.exe] [Beijing Rising Technology Co., Ltd., 7.0.2.5]
[C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[f:\瑞星防火墙\rising\rfw\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 79]
[F:\瑞星防火墙\Rising\Rfw\ProcCom.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
[f:\瑞星防火墙\rising\rfw\RsCommX2.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
[f:\瑞星防火墙\rising\rfw\RSAPPMGR.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.0]
[f:\瑞星防火墙\rising\rfw\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.10]
[f:\瑞星防火墙\rising\rfw\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16]
[f:\瑞星防火墙\rising\rfw\RfwCtrl.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.7]
[f:\瑞星防火墙\rising\rfw\ProxyCtr.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.1]
[f:\瑞星防火墙\rising\rfw\RsXML.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 0]
[f:\瑞星防火墙\rising\rfw\PngDll.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 3]
[f:\瑞星防火墙\rising\rfw\rfwlog.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.12]
[PID: 1644 / Administrator][F:\迅雷\Program\Thunder5.exe] [Thunder Networking Technologies,LTD, 5.7.4.401]
[F:\迅雷\Program\TaskManager.dll] [Thunder Networking Technologies,LTD, 1, 2, 4, 38]
[F:\迅雷\Program\download_interface.dll] [Thunder Networking Technologies,LTD, 2, 19, 2, 180]
[F:\迅雷\Program\stlport_vc646.dll] [STLport Consulting, Inc., 4.6.2003.1031]
[F:\迅雷\Program\asyn_dns.dll] [Thunder Networking Technologies,LTD, 2, 19, 2, 180]
[F:\迅雷\Program\streammedialib.dll] [, 1, 2, 0, 78]
[F:\迅雷\Program\al.dll] [, 1, 0, 1, 1]
[F:\迅雷\Program\XLNet.Dll] [Thunder Networking Technologies,LTD, 1, 2, 1, 9]
[F:\迅雷\Program\BHOStub.dll] [Thunder Networking Technologies,LTD, 1, 1, 0, 8]
[F:\迅雷\Components\DownAndPlay\DownAndPlay.dll] [, 1, 0, 7, 25]
[F:\瑞星\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 3]
[F:\迅雷\Program\iTargetAD.dll] [Thunder Networking Technologies,LTD, 1, 0, 3, 34]
[C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,16,0]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[F:\迅雷\Components\InMedia\iEmbedShell.dll] [　, 1, 0, 1, 23]
[F:\迅雷\Components\InMedia\iEmbed14.dll] [Thunder Networking Technologies,LTD, 3, 4, 5, 98]
[F:\迅雷\Components\InMedia\PlayerHelper.dll] [thunder, 1, 1, 1, 28]
[F:\迅雷\Components\InMedia\XLNet.dll] [Thunder Networking Technologies,LTD, 1, 2, 1, 9]
[F:\迅雷\Components\InMedia\XLIPC.DLL] [Thunder Networking Technologies,LTD, 1, 0, 0, 2]
[F:\迅雷\Components\P4PClient\P4PClient.dll] [Thunder Networking Technologies,LTD, 2, 2, 5, 70]
[F:\迅雷\Components\Community\XLCommunity.dll] [Thunder Networking Technologies,LTD, 1, 4, 2, 0]

[F:\迅雷\Program\RegisterDll.dll] [Thunder Networking Technologies,LTD, 2, 16, 5, 61]
[F:\迅雷\Program\MSVCIRT.dll] [Microsoft Corporation, 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[F:\迅雷\Components\Security\ThunderSafe.dll] [深圳市迅雷网络技术有限公司, 1, 0, 7, 66]
[F:\迅雷\Program\ATL71.DLL] [Microsoft Corporation, 7.10.3077.0]
[F:\迅雷\Components\Security\XLSafeUI.dll] [深圳市迅雷网络技术有限公司, 1, 0, 7, 66]
[F:\迅雷\Components\Search\XLSearch.dll] [Thunder Networking Technologies,LTD, 1, 1, 6, 19]
[F:\迅雷\Program\LiveUpdate.dll] [Thunder Networking Technologies,LTD, 1, 2, 1, 20]
[F:\迅雷\Plugins\XLSafeHost\XLSafeHost.dll] [深圳市迅雷网络技术有限公司, 1, 0, 7, 56]
[F:\迅雷\Plugins\XLSafeHost\ThunderRAV\ThunderRAV.dll] [N/A, ]
[F:\迅雷\Plugins\XLSafeHost\ThunderRAV\bin\rsscan.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 3]
[F:\迅雷\Plugins\XLSafeHost\ThunderRAV\bin\recomp.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16]
[F:\迅雷\Plugins\XLSafeHost\ThunderRAV\bin\refs.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 7]
[F:\迅雷\Plugins\XLSafeHost\ThunderRAV\bin\viruslib.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 14]
[F:\迅雷\Plugins\XLSafeHost\ThunderRAV\bin\relibldr.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 11]
[F:\迅雷\Plugins\GouGouTop\GouGouTop.dll] [Thunder Networking Technologies,LTD, 1, 0, 2, 4]
[F:\迅雷\Plugins\BhoAdv\bho_adv.dll] [深圳市迅雷网络技术有限公司, 1.0.1.0]
[F:\迅雷\Components\ExplorerHelper\ExplorerHelper.dll] [Thunder Networking Technologies,LTD, 1, 0, 4, 16]
[F:\迅雷\Components\Tips\TipsClient.dll] [Thunder Networking Technologies,LTD, 2, 2, 8, 93]
[F:\迅雷\Components\VPSHELL\VPSHELL.dll] [XunLei, 2, 3, 0, 28]
[F:\迅雷\Components\VPSHELL\VideoPicture.dll] [XunLei, 2, 3, 0, 28]
[F:\迅雷\Components\UserExperience\UserExperience.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
[F:\迅雷\Components\ResWorker\DsXlCom.dll] [, 1, 0, 0, 24]
[F:\迅雷\Components\ResWorker\DataProcessor_00.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 13]
[F:\迅雷\Components\ResWorker\MediaWorker.dll] [Thunder Networking Technologies,LTD, 1, 2, 0, 20]
[F:\迅雷\Components\Tips\XLIPC.DLL] [Thunder Networking Technologies,LTD, 1, 0, 0, 2]
[F:\迅雷\Components\DownloadStat\DownloadStat.dll] [深圳市迅雷网络技术有限公司, 1, 3, 1, 4]
[PID: 2708 / Administrator][F:\system repair engine\SREngPS.EXE] [Smallfrogs Studio, 2.5.16.900]
[F:\system repair engine\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15]



--------------------------------------------------------------------------------



文件关联

.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]



--------------------------------------------------------------------------------



Winsock 提供者

N/A



--------------------------------------------------------------------------------



Autorun.inf

N/A



--------------------------------------------------------------------------------



HOSTS 文件

127.0.0.1 localhost



--------------------------------------------------------------------------------



进程特权扫描

特殊特权被允许： SeLoadDriverPrivilege [PID = 172, C:\PROGRAM FILES\TENCENT\TT\TTRAVELER.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1644, F:\迅雷\PROGRAM\THUNDER5.EXE]



--------------------------------------------------------------------------------



API HOOK

N/A



--------------------------------------------------------------------------------



隐藏进程

N/A



--------------------------------------------------------------------------------