Trojan-Spy.Win32.delf.ul怎么杀不掉啊？在线求助！

显示全部楼层 · 发表于 2007-3-11 09:42:42

多谢大家的热心帮助啊！！十分感激！！１

显示全部楼层 · 发表于 2007-3-12 23:25:51

我和楼主同样问题，用windows清理助手也没发现问题，这是SREngLOG扫描结果，麻烦高手帮忙看看，感激不尽

2007-03-12,16:12:17
System Repair Engineer 2.4.12.806
Smallfrogs (http://www.KZTechs.com)
Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能
以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><D:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Publisher]
<MsnMsgr><"D:\Program Files\MSN Messenger\MsnMsgr.Exe" /background>  [(Verified)Microsoft Corporation]
<ST0RMSetEx><D:\WINDOWS\system32\rundll32.exe D:\WINDOWS\system\AV1CAP.dll,Run>  [mcsoft]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<PHIME2002A><; D:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [(Verified)Microsoft Windows Publisher]
<ISUSPM Startup><; D:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup>  [InstallShield Software Corporation]
<ISUSScheduler><; "D:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start>  [InstallShield Software Corporation]
<wcmdmgr><; D:\WINDOWS\wt\updater\wcmdmgrl.exe -launch>  [WildTangent, Inc.]
<BigDogPath><D:\WINDOWS\VM_STI.EXE USB PC Camera 301P>  [N/A]
<Alcmtr><; ALCMTR.EXE>  [(Verified)Microsoft Windows Publisher]
<BigDog303><D:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)>  [N/A]
<kav><"C:\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe">  [Kaspersky Lab]
<IMSCMig><; D:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload>  [(Verified)Microsoft Corporation]
<NvCplDaemon><; RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
<IntelZeroConfig><"D:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe">  [Intel Corporation]
<IntelWireless><"D:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless>  [Intel Corporation]
<NeroFilterCheck><D:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe>  [Nero AG]
<StormCodec_Helper><"D:\Ringz Studio\Storm Codec\StormSet.exe" /S /opti>  []
<Acrobat Assistant 7.0><; "D:\Adobe\Acrobat 7.0\Distillr\Acrotray.exe">  [Adobe Systems Inc.]
<High Definition Audio Property Page Shortcut><; HDAShCut.exe>  [(Verified)Microsoft Windows XP Publisher]
<hxgame-update><; D:\Program Files\hxupdate\hxgame-update.exe>  [N/A]
<IMJPMIG8.1><; "D:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [(Verified)Microsoft Windows Publisher]
<KernelFaultCheck><; %systemroot%\system32\dumprep 0 -k>  [N/A]
<PHIME2002ASync><; D:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [(Verified)Microsoft Windows Publisher]
<RTHDCPL><; RTHDCPL.EXE>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
<TkBellExe><; "D:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot>  [N/A]
<QuickTime Task><"D:\Program Files\QuickTime\qttask.exe" -atboottime>  [Apple Computer, Inc.]
<iTunesHelper><"D:\Program Files\iTunes\iTunesHelper.exe">  [(Verified)"Apple Computer, Inc."]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe>  [(Verified)Microsoft Windows Publisher]
<Userinit><D:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Windows Publisher]
<UIHost><logonui.exe>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
<WinlogonNotify: klogon><D:\WINDOWS\system32\klogon.dll>  [Kaspersky Lab]
==================================
启动文件夹
N/A
==================================
服务
[Adobe LM Service / Adobe LM Service][Stopped/Manual Start]
  <"D:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"><Adobe Systems>
[ASP.NET State Service / aspnet_state][Stopped/Manual Start]
  <D:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe><Microsoft Corporation>
[Kaspersky Anti-Virus 6.0 / AVP][Running/Auto Start]
  <"C:\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r><Kaspersky Lab>
[Creative Service for CDROM Access / Creative Service for CDROM Access][Running/Auto Start]
  <D:\WINDOWS\system32\CTsvcCDA.EXE><Creative Technology Ltd>
[Intel(R) PROSet/Wireless Event Log / EvtEng][Running/Auto Start]
  <D:\Program Files\Intel\Wireless\Bin\EvtEng.exe><Intel Corporation>
[InstallDriver Table Manager / IDriverT][Stopped/Manual Start]
  <"D:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe"><Macrovision Corporation>
[iPod 服务 / iPod Service][Running/Manual Start]
  <"D:\Program Files\iPod\bin\iPodService.exe"><Apple Inc.>
[Kingsoft Personal Firewall Service / KPfwSvc][Stopped/Auto Start]
  <><N/A>
[Kingsoft Antivirus KWatch Service / KWatchSvc][Stopped/Auto Start]
  <><N/A>
[MATLAB Server / matlabserver][Running/Auto Start]
  <C:\MATLAB6p5p1\webserver\bin\win32\matlabserver.exe><N/A>
[NBService / NBService][Stopped/Manual Start]
  <D:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe><N/A>
[NVIDIA Display Driver Service / NVSvc][Running/Auto Start]
  <D:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>
[Intel(R) PROSet/Wireless Registry Service / RegSrvc][Running/Auto Start]
  <D:\Program Files\Intel\Wireless\Bin\RegSrvc.exe><Intel Corporation>
[REM0TE REGISTRY / REM0TEREGISTRY][Running/Auto Start]
  <D:\WINDOWS\system\REM0REG.EXE><N/A>
[Intel(R) PROSet/Wireless Service / S24EventMonitor][Running/Auto Start]
  <D:\Program Files\Intel\Wireless\Bin\S24EvMon.exe><Intel Corporation>
[Windows Video / VideoService][Stopped/Auto Start]
  <><N/A>
==================================
驱动程序
[AEGIS Protocol (IEEE 802.1x) v3.5.3.0 / AegisP][Running/Auto Start]
  <system32\DRIVERS\AegisP.sys><Meetinghouse Data Communications>
[ceggjgag / ceggjgag][Stopped/Boot Start]
  <\SystemRoot\system32\drivers\ceggjgag.sys><N/A>
[Intel(R) PRO Network Connection Driver / E100B][Running/Manual Start]
  <system32\DRIVERS\e100b325.sys><Intel Corporation>
[GEAR CDRom Filter / GEARAspiWDM][Running/Manual Start]
  <SYSTEM32\DRIVERS\GEARAspiWDM.sys><GEAR Software Inc.>
[Microsoft UAA Function Driver for High Definition Audio Service / HdAudAddService][Stopped/Manual Start]
  <system32\drivers\HdAudio.sys><Windows (R) Server 2003 DDK provider>
[Microsoft UAA Bus Driver for High Definition Audio / HDAudBus][Running/Manual Start]
  <system32\DRIVERS\HDAudBus.sys><Windows (R) Server 2003 DDK provider>
[HSFHWAZL / HSFHWAZL][Running/Manual Start]
  <system32\DRIVERS\HSFHWAZL.sys><Conexant Systems, Inc.>
[HSF_DPV / HSF_DPV][Running/Manual Start]
  <system32\DRIVERS\HSF_DPV.sys><Conexant Systems, Inc.>
[Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Running/Manual Start]
  <system32\drivers\RtkHDAud.sys><Realtek Semiconductor Corp.>
[Jukebox3 / Jukebox3][Stopped/Manual Start]
  <system32\DRIVERS\ctpdusb.sys><Creative Technology Ltd.>
[kl1 / kl1][Running/Boot Start]
  <\SystemRoot\system32\drivers\kl1.sys><Kaspersky Lab>
[klif / klif][Running/System Start]
  <\??\D:\WINDOWS\system32\drivers\klif.sys><Kaspersky Lab>
[kmsinput / kmsinput][Stopped/Manual Start]
  <\??\D:\WINDOWS\system32\drivers\kmsinput.sys><N/A>
[KNetWch / KNetWch][Stopped/System Start]
  <\??\D:\KAV2006\KNetWch.SYS><N/A>
[KWatch3 / KWatch3][Running/System Start]
  <\??\D:\WINDOWS\system32\drivers\KWatch3.SYS><Kingsoft Corporation>
[mdmxsdk / mdmxsdk][Running/Auto Start]
  <system32\DRIVERS\mdmxsdk.sys><Conexant>
[npkcrypt / npkcrypt][Running/Auto Start]
  <\??\D:\Tencent\QQ\npkcrypt.sys><INCA Internet Co., Ltd.>
[npkycryp / npkycryp][Stopped/Manual Start]
  <\??\D:\Tencent\QQ\npkycryp.sys><N/A>
[nv / nv][Running/Manual Start]
  <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[OX16C95x Serial port driver / oxser][Running/System Start]
  <system32\DRIVERS\oxser.sys><OEM>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[WLAN Transport / s24trans][Running/Auto Start]
  <system32\DRIVERS\s24trans.sys><Intel Corporation>
[SaiH0109 / SaiH0109][Stopped/Manual Start]
  <system32\DRIVERS\SaiH0109.sys><Saitek>
[SaiU0109 / SaiU0109][Stopped/Manual Start]
  <system32\DRIVERS\SaiU0109.sys><Saitek>
[Secdrv / Secdrv][Stopped/Manual Start]
  <system32\DRIVERS\secdrv.sys><N/A>
[Sony Notebook Control Device / SNC][Running/Manual Start]
  <system32\DRIVERS\SonyNC.sys><Sony Corporation>
[Sony USB Filter Driver (SONYPVU1) / SONYPVU1][Stopped/Manual Start]
  <system32\DRIVERS\SONYPVU1.SYS><Sony Corporation>
[TSP / TSP][Stopped/Manual Start]
  <\??\D:\WINDOWS\system32\drivers\klif.sys><Kaspersky Lab>
[Virtual PC Application Services / VPCAppSv][Running/Auto Start]
  <system32\DRIVERS\VPCAppSv.sys><Connectix Corporation>
[Virtual PC Emulated Ethernet Switch Driver / VPCNetS2][Stopped/Manual Start]
  <system32\DRIVERS\VPCNetS2.sys><Connectix Corporation>
[用于 Windows XP 的英特尔(R) PRO/无线 2200BG 网络连接驱动程序 / w29n51][Running/Manual Start]
  <system32\DRIVERS\w29n51.sys><Intel? Corporation>
[winachsf / winachsf][Running/Manual Start]
  <system32\DRIVERS\HSF_CNXT.sys><Conexant Systems, Inc.>
[World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start]
  <system32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>
[USB PC Camera 301P / ZSMC301b][Stopped/Manual Start]
  <System32\Drivers\usbVM31b.sys><VM>
[VIMICRO USB PC Camera (ZC0301PLH) / ZSMC303][Stopped/Manual Start]
  <System32\Drivers\usbVM303.sys><Vimicro Corporation>
==================================
浏览器加载项
[Thunder Browser Helper]
  {0005A87C-D626-4B3A-84F9-1D9571695F55} <D:\Thunder\ComDlls\XunLeiBHO_007.dll, Thunder Networking Technologies,LTD>
[Adobe PDF Reader Link Helper]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <D:\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[QQBrowserHelperObject Class]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <D:\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[IEExt Class]
  {634539A8-7FA8-45E2-8DC3-253AF98548A1} <D:\WINDOWS\system\MFS0FT.DLL, microsoft>
[]
  {7F9FBFAD-C171-4B2B-AC7E-1EA1119C938D} <D:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\MICROS~1\APPLIC~1\IE_Help.dll, >
[Google Toolbar Helper]
  {AA58ED58-01DD-4d91-8333-CF10577473F7} <d:\program files\google\googletoolbar2.dll, Google Inc.>
[Adobe PDF Conversion Toolbar Helper]
  {AE7CD045-E861-484f-8273-0445EE161910} <D:\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll, Adobe Systems Incorporated>
[启动迅雷5]
  {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <D:\Thunder\Thunder.exe, Thunder Networking Technologies,LTD>
[Web Anti-Virus]
  {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} <C:\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll, Kaspersky Lab>
[信息检索(&R)]
  {92780B25-18CC-41C8-B9BE-3C9C571A8263} <D:\MICROS~1\OFFICE11\REFIEBAR.DLL, Microsoft Corporation>
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <D:\Tencent\QQ\QQ.EXE, TENCENT>
[QQIEFloatBarCfgCmd Class]
  {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <D:\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[Messenger]
  {FB5F1910-F110-11d2-BB9E-00C04F795683} <D:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[Adobe PDF]
  {47833539-D0C5-4125-9FA8-0819E2EAAC93} <D:\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll, Adobe Systems Incorporated>
[&Google]
  {2318C2B1-4965-11d4-9B18-009027A5CD4F} <d:\program files\google\googletoolbar2.dll, Google Inc.>
[Checkers Class]
  {00B71CFB-6864-4346-A978-C0A14556272C} <D:\WINDOWS\Downloaded Program Files\msgrchkr.dll, N/A>
[Windows Genuine Advantage Validation Tool]
  {17492023-C23A-453E-A040-C7C580BBF700} <D:\WINDOWS\system32\LegitCheckControl.DLL, 木蚂蚁社区>
[Minesweeper Flags Class]
  {2917297F-F02B-4B9D-81DF-494B6333150B} <D:\WINDOWS\Downloaded Program Files\minesweeper.dll, N/A>
[MSN Photo Upload Tool]
  {4F1E5B1A-2A80-42CA-8532-2D05CB959537} <D:\WINDOWS\Downloaded Program Files\MsnPUpld.dll, N/A>
[MUWebControl Class]
  {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} <D:\WINDOWS\system32\muweb.dll, Microsoft Corporation>
[MessengerStatsClient Class]
  {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} <D:\WINDOWS\Downloaded Program Files\messengerstatsclient.dll, N/A>
[MsnMessengerSetupDownloadControl Class]
  {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} <D:\WINDOWS\Downloaded Program Files\MsnMessengerSetupDownloader.ocx, N/A>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <D:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[Solitaire Showdown Class]
  {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} <D:\WINDOWS\Downloaded Program Files\solitaireshowdown.dll, N/A>
[Thunder Browser Helper]
  {0005A87C-D626-4B3A-84F9-1D9571695F55} <D:\Thunder\ComDlls\XunLeiBHO_007.dll, Thunder Networking Technologies,LTD>
[Adobe PDF Reader Link Helper]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <D:\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[Windows Genuine Advantage Validation Tool]
  {17492023-C23A-453E-A040-C7C580BBF700} <D:\WINDOWS\system32\LegitCheckControl.DLL, 木蚂蚁社区>
[Windows Media Player]
  {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <D:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[&Google]
  {2318C2B1-4965-11D4-9B18-009027A5CD4F} <d:\program files\google\googletoolbar2.dll, Google Inc.>
[Tabular Data Control]
  {333C7BC4-460F-11D0-BC04-0080C7055A83} <D:\WINDOWS\system32\tdc.ocx, Microsoft Corporation>
[QuickTime Object]
  {4063BE15-3B08-470D-A0D5-B37161CFFD69} <D:\Program Files\QuickTime\QTPlugin.ocx, Apple Computer, Inc.>
[Adobe PDF]
  {47833539-D0C5-4125-9FA8-0819E2EAAC93} <D:\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll, Adobe Systems Incorporated>
[QQBrowserHelperObject Class]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <D:\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[IEExt Class]
  {634539A8-7FA8-45E2-8DC3-253AF98548A1} <D:\WINDOWS\system\MFS0FT.DLL, microsoft>
[Windows Media Player]
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <D:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[MUWebControl Class]
  {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} <D:\WINDOWS\system32\muweb.dll, Microsoft Corporation>
[Windows Media Services DRM Storage object]
  {760C4B83-E211-11D2-BF3E-00805FBE84A6} <D:\WINDOWS\system32\drmstor.dll, Microsoft Corporation>
[]
  {7F9FBFAD-C171-4B2B-AC7E-1EA1119C938D} <D:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\MICROS~1\APPLIC~1\IE_Help.dll, >
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <D:\Thunder\ComDlls\XunLeiBHO_007.dll, Thunder Networking Technologies,LTD>
[Google Toolbar Helper]
  {AA58ED58-01DD-4D91-8333-CF10577473F7} <d:\program files\google\googletoolbar2.dll, Google Inc.>
[Adobe PDF Conversion Toolbar Helper]
  {AE7CD045-E861-484F-8273-0445EE161910} <D:\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll, Adobe Systems Incorporated>
[MediaBar]
  {C45B1500-7B63-47C2-AB25-C28CB46AFDEE} <D:\WINDOWS\Downloaded Program Files\MusicManagerPlugin.ocx, N/A>
[AUDIO__MP3 Moniker Class]
  {CD3AFA76-B84F-48F0-9393-7EDC34128127} <D:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[AUDIO__X_MS_WMA Moniker Class]
  {CD3AFA84-B84F-48F0-9393-7EDC34128127} <D:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[VIDEO__AVI Moniker Class]
  {CD3AFA88-B84F-48F0-9393-7EDC34128127} <D:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[VIDEO__X_MS_WMV Moniker Class]
  {CD3AFA94-B84F-48F0-9393-7EDC34128127} <D:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <D:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[&使用迅雷下载]
  <D:\Thunder\Program\geturl.htm, N/A>
[&使用迅雷下载全部链接]
  <D:\Thunder\Program\getallurl.htm, N/A>
[Google 搜索(&G)]
  <res://d:\program files\google\GoogleToolbar2.dll/cmsearch.html, N/A>
[上传到QQ网络硬盘]
  <D:\Tencent\QQ\AddToNetDisk.htm, N/A>
[反向链接]
  <res://d:\program files\google\GoogleToolbar2.dll/cmbacklinks.html, N/A>
[导出到 Microsoft Office Excel(&X)]
  <res://D:\MICROS~1\OFFICE11\EXCEL.EXE/3000, N/A>
[将转换链接目标为 Adobe PDF]
  <res://D:\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html, N/A>
[将选定的内容转换为 Adobe PDF]
  <res://D:\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html, N/A>
[将选定的内容转换到现有的 PDF]
  <res://D:\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html, N/A>
[将选定的链接转换到现有的 PDF]
  <res://D:\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html, N/A>
[将链接目标转换到现有的 PDF]
  <res://D:\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html, N/A>
[添加到QQ自定义面板]
  <D:\Tencent\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
  <D:\Tencent\QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <D:\Tencent\QQ\SendMMS.htm, N/A>
[类似网页]
  <res://d:\program files\google\GoogleToolbar2.dll/cmsimilar.html, N/A>
[缓存的网页快照]
  <res://d:\program files\google\GoogleToolbar2.dll/cmcache.html, N/A>
[翻译英文字词(&T)]
  <res://d:\program files\google\GoogleToolbar2.dll/cmwordtrans.html, N/A>
[转换为 Adobe PDF]
  <res://D:\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html, N/A>
[转换为现有 PDF]
  <res://D:\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html, N/A>
[转换到现有的 PDF]
  <res://D:\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html, N/A>
[转换选定的链接为 Adobe PDF]
  <res://D:\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html, N/A>
[转换选定的链接为 Adobe PDF ]
  <res://D:\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html, N/A>
[转换选定的链接为现有 PDF]
  <res://D:\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html, N/A>
[转换选项为 Adobe PDF]
  <res://D:\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html, N/A>
[转换选项为现有 PDF]
  <res://D:\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html, N/A>
[转换链接目标为 Adobe PDF]
  <res://D:\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html, N/A>
[转换链接目标为现有 PDF]
  <res://D:\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html, N/A>

显示全部楼层 · 发表于 2007-3-12 23:26:48

==================================
正在运行的进程
[PID: 824][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 912][\??\D:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 940][\??\D:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\system32\klogon.dll]  [Kaspersky Lab, 6.0.0.297]
[D:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 648][D:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[D:\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll]  [Adobe Systems, Inc., 7.0.0.0]
[D:\Adobe\Acrobat 7.0\ActiveX\PDFShell.CHS]  [Adobe Systems, Inc., 7.0.0.0]
[D:\WINDOWS\system32\nvcpl.dll]  [NVIDIA Corporation, 6.14.10.7743]
[D:\WINDOWS\system32\NVRSZHC.DLL]  [NVIDIA Corporation, 6.14.10.7743]
[PID: 860][D:\WINDOWS\system32\rundll32.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\system\AV1CAP.dll]  [mcsoft, 1, 0, 0, 0]
[PID: 1572][D:\WINDOWS\VM_STI.EXE]  [VM., 4.2.610.4]
[D:\WINDOWS\system32\msdmo.dll]  [, ]
[PID: 1660][D:\WINDOWS\VM303_STI.EXE]  [Vimicro, 4, 3, 625, 61]
[D:\WINDOWS\system32\msdmo.dll]  [, ]
[PID: 2156][D:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe]  [Intel Corporation, 10.5.0.5  ]
[D:\Program Files\Intel\Wireless\bin\PfMgrApi.dll]  [Intel Corporation, 10.5.0.2  ]
[D:\Program Files\Intel\Wireless\bin\TraceAPI.DLL]  [Intel Corporation, 10.5.0.1  ]
[D:\Program Files\Intel\Wireless\bin\PsRegApi.dll]  [Intel Corporation, 10.5.0.4  ]
[D:\Program Files\Intel\Wireless\bin\DbEngine.dll]  [Intel Corporation, 10.5.0.2  ]
[D:\Program Files\Intel\Wireless\bin\LIBEAY32.dll]  [The OpenSSL Project, http://www.openssl.org/, 0.9.8]
[D:\Program Files\Intel\Wireless\bin\IntStngs.dll]  [, 10.5.0.2  ]
[D:\Program Files\Intel\Wireless\bin\MurocApi.dll]  [Intel Corporation, 10.5.0.6]
[D:\Program Files\Intel\Wireless\bin\S24MUDLL.dll]  [Intel Corporation, 10.5.0.1  ]
[D:\Program Files\Intel\Wireless\Bin\ZcSvcCHS.dll]  [Intel Corporation, 10.5.0.5  ]
[PID: 2188][D:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe]  [Intel Corporation, 10.5.0.1  ]
[D:\Program Files\Intel\Wireless\Bin\PsRegApi.dll]  [Intel Corporation, 10.5.0.4  ]
[D:\Program Files\Intel\Wireless\Bin\LIBEAY32.dll]  [The OpenSSL Project, http://www.openssl.org/, 0.9.8]
[D:\Program Files\Intel\Wireless\Bin\IntStngs.dll]  [, 10.5.0.2  ]
[D:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL]  [Intel Corporation, 10.5.0.1  ]
[D:\Program Files\Intel\Wireless\Bin\MurocApi.dll]  [Intel Corporation, 10.5.0.6]
[D:\Program Files\Intel\Wireless\Bin\S24MUDLL.dll]  [Intel Corporation, 10.5.0.1  ]
[D:\Program Files\Intel\Wireless\Bin\FrWrkCHS.dll]  [Intel Corporation, 10.5.0.1  ]
[D:\Program Files\Intel\Wireless\Bin\FrameworkPlugins\ConnMgr.dll]  [Intel Corporation, 10.5.0.173  ]
[D:\Program Files\Intel\Wireless\Bin\PfMgrApi.dll]  [Intel Corporation, 10.5.0.2  ]
[D:\Program Files\Intel\Wireless\Bin\DbEngine.dll]  [Intel Corporation, 10.5.0.2  ]
[D:\Program Files\Intel\Wireless\Bin\IntWACHS.dll]  [Intel Corporation, 10.5.0.173  ]
[D:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 2508][D:\Program Files\QuickTime\qttask.exe]  [Apple Computer, Inc., 7.1.5]
[PID: 2584][D:\Program Files\iTunes\iTunesHelper.exe]  [Apple Inc., 7.1.0.59]
[D:\Program Files\iTunes\iTunesHelper.Resources\zh_CN.lproj\iTunesHelperLocalized.DLL]  [Apple Inc., 7.1.0.43]
[D:\Program Files\iTunes\iTunesHelper.Resources\iTunesHelper.DLL]  [Apple Inc., 7.1.0.59]
[PID: 2808][D:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2860][D:\Program Files\MSN Messenger\MsnMsgr.Exe]  [Microsoft Corporation, 8.1.0178.00]
[D:\Program Files\MSN Messenger\MSNCore.dll]  [Microsoft Corporation, 8.1.0178.00]
[D:\Program Files\MSN Messenger\msidcrl40.dll]  [Microsoft Corporation, 4.100.313.1]
[D:\Program Files\MSN Messenger\ContactsUX.dll]  [Microsoft Corporation, 8.1.0178.00]
[D:\Program Files\MSN Messenger\msgslang.8.1.0178.00.dll]  [Microsoft Corporation, 8.1.0178.00]
[D:\Program Files\MSN Messenger\msgsres.dll]  [Microsoft Corporation, 8.1.0178.00]
[D:\Program Files\MSN Messenger\custsat.dll]  [Microsoft Corporation, 9.0.3790.2428 (srv03_sp1_qfe.050422-1043)]
[D:\Program Files\MSN Messenger\lcapi.dll]  [Microsoft Corporation, 1.7.256.0 (RTC Version 4.3.5371.0) built by: msn8.0(rtbldlab)]
[D:\WINDOWS\system32\msdmo.dll]  [, ]
[D:\Program Files\MSN Messenger\lcres.dll]  [Microsoft Corporation, 1.7.109.0 (RTC Version 4.3.5371.0) built by: msn8.0(rtbldlab)]
[D:\Program Files\MSN Messenger\RTMPLTFM.dll]  [Microsoft Corporation, 3.0.5774.0 built by: media_msn80]
[D:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[D:\Program Files\MSN Messenger\MSGSWCAM.dll]  [Microsoft Corporation, 8.1.0178.00]
[D:\WINDOWS\system32\sirenacm.dll]  [Microsoft Corp., 8.1.0178.00]
[D:\Program Files\MSN Messenger\lmcdata.dll]  [Microsoft Corporation, 8.1.0178.00]
[D:\Program Files\MSN Messenger\contact.dll]  [Microsoft Corporation, 8.1.0178.00]
[D:\Program Files\MSN Messenger\abssm.dll]  [Microsoft Corporation, 8.1.0178.00]
[D:\Program Files\MSN Messenger\dfsr.dll]  [Microsoft Corporation, 8.1.0178.00]
[D:\Program Files\MSN Messenger\usnsvcps.dll]  [Microsoft Corporation, 8.1.0178.00]
[C:\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scr_ch_pg.dll]  [Kaspersky Lab, 1.0.6.297]
[C:\Kaspersky Lab\Kaspersky Anti-Virus 6.0\klscav.dll]  [Kaspersky Lab, 6.0.0.297]
[C:\Kaspersky Lab\Kaspersky Anti-Virus 6.0\pr_remote.dll]  [Kaspersky Lab, 6.0.0.297]
[C:\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prloader.dll]  [Kaspersky Lab, 6.0.0.297]
[C:\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prkernel.ppl]  [Kaspersky Lab, 6.0.0.297]
[c:\kaspersky lab\kaspersky anti-virus 6.0\params.ppl]  [Kaspersky Lab, 6.0.0.297]
[c:\kaspersky lab\kaspersky anti-virus 6.0\pxstub.ppl]  [Kaspersky Lab, 6.0.0.297]
[c:\kaspersky lab\kaspersky anti-virus 6.0\tempfile.ppl]  [Kaspersky Lab, 6.0.0.297]
[c:\kaspersky lab\kaspersky anti-virus 6.0\nfio.ppl]  [Kaspersky Lab, 6.0.0.297]
[c:\kaspersky lab\kaspersky anti-virus 6.0\fsdrvplgn.ppl]  [Kaspersky Lab, 6.0.0.297]
[PID: 3544][D:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe]  [Intel Corporation, 10.5.0.3 ]
[D:\Program Files\Intel\Wireless\Bin\acAuth.dll]  [, 4.1.0.63 2006-06-23 16:07:06]
[D:\Program Files\Intel\Wireless\Bin\C1XStngs.dll]  [Intel Corporation, 10.5.0.1  ]
[D:\Program Files\Intel\Wireless\Bin\PsRegApi.dll]  [Intel Corporation, 10.5.0.4  ]
[D:\Program Files\Intel\Wireless\Bin\IntStngs.dll]  [, 10.5.0.2  ]
[D:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL]  [Intel Corporation, 10.5.0.1  ]
[D:\Program Files\Intel\Wireless\Bin\IWMSPROV.DLL]  [N/A, ]
[D:\Program Files\Intel\Wireless\Bin\C8021CHS.dll]  [Intel Corporation, 10.5.0.1  ]
[D:\Program Files\Intel\Wireless\Bin\LSAWRAPI.dll]  [Intel Corporation, 10.5.0.1  ]
[D:\Program Files\Intel\Wireless\Bin\PfMgrApi.dll]  [Intel Corporation, 10.5.0.2  ]
[D:\Program Files\Intel\Wireless\Bin\DbEngine.dll]  [Intel Corporation, 10.5.0.2  ]
[D:\Program Files\Intel\Wireless\Bin\LIBEAY32.dll]  [The OpenSSL Project, http://www.openssl.org/, 0.9.8]
[PID: 2908][D:\Tencent\QQ\QQ.exe]  [TENCENT, 0, 0, 0, 0]
[D:\Tencent\QQ\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
[D:\Tencent\QQ\QQHelperDll.dll]  [, 1, 0, 0, 1]
[D:\Tencent\QQ\BasicCtrlDll.dll]  [Tencent, 6, 0, 200, 320]
[C:\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scr_ch_pg.dll]  [Kaspersky Lab, 1.0.6.297]
[C:\Kaspersky Lab\Kaspersky Anti-Virus 6.0\klscav.dll]  [Kaspersky Lab, 6.0.0.297]
[C:\Kaspersky Lab\Kaspersky Anti-Virus 6.0\pr_remote.dll]  [Kaspersky Lab, 6.0.0.297]
[C:\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prloader.dll]  [Kaspersky Lab, 6.0.0.297]
[C:\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prkernel.ppl]  [Kaspersky Lab, 6.0.0.297]
[c:\kaspersky lab\kaspersky anti-virus 6.0\params.ppl]  [Kaspersky Lab, 6.0.0.297]
[c:\kaspersky lab\kaspersky anti-virus 6.0\pxstub.ppl]  [Kaspersky Lab, 6.0.0.297]
[c:\kaspersky lab\kaspersky anti-virus 6.0\tempfile.ppl]  [Kaspersky Lab, 6.0.0.297]
[c:\kaspersky lab\kaspersky anti-virus 6.0\nfio.ppl]  [Kaspersky Lab, 6.0.0.297]
[c:\kaspersky lab\kaspersky anti-virus 6.0\fsdrvplgn.ppl]  [Kaspersky Lab, 6.0.0.297]
[D:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
[D:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 3352][D:\Thunder\Program\Thunder5.exe]  [Thunder Networking Technologies,LTD, 5, 5, 6, 274]
[D:\Thunder\Program\TaskManager.dll]  [Thunder Networking Technologies,LTD, 1, 0, 2, 14]
[D:\Thunder\Program\download_interface.dll]  [Thunder Networking Technologies,LTD, 2, 12, 2, 56]
[D:\Thunder\Program\asyn_dns.dll]  [Thunder Networking Technologies,LTD, 2, 12, 2, 56]
[D:\Thunder\Program\iTargetAD.dll]  [Thunder Networking Technologies,LTD, 1, 0, 2, 16]
[D:\Thunder\Program\BHOStub.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 8]
[D:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
[D:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[D:\Thunder\Components\DiagnoseHelper\DiagnoseHelper.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 10]
[D:\Thunder\Components\PortVerify\PortVerify.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
[D:\Thunder\Components\ExplorerHelper\ExplorerHelper.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
[D:\Thunder\Components\DTAG\DTAG.dll]  [Thunder Networking Technologies,LTD, 1, 1, 0, 2]
[D:\Thunder\Components\DTAG\ExtractMediaTag.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
[D:\Thunder\Program\LiveUpdate.dll]  [, 1, 0, 1, 17]
[D:\Thunder\Components\InMedia\iEmbedShell.dll]  [　, 1, 0, 0, 15]
[D:\Thunder\Components\InMedia\iEmbed08.dll]  [　, 3, 2, 0, 63]
[D:\Thunder\Components\Community\XLCommunity.dll]  [Thunder Networking Technologies,LTD, 1, 0, 4, 15]
[D:\Thunder\Program\RegisterDll.dll]  [Thunder Networking Technologies,LTD, 2, 2, 1, 43]
[D:\Thunder\Components\Search\XLSearch.dll]  [Thunder Networking Technologies,LTD, 1, 0, 2, 7]
[D:\Thunder\Components\P4PClient\P4PClient.dll]  [Thunder Networking Technologies,LTD, 1, 0, 2, 14]
[D:\Thunder\Components\VPSHELL\VPSHELL.dll]  [, 1, 1, 0, 4]
[D:\Thunder\Components\VPSHELL\VideoPicture.dll]  [XunLei, 1, 1, 0, 4]
[D:\Thunder\Components\Tips\TipsClient.dll]  [Thunder Networking Technologies,LTD, 2, 1, 1, 50]
[C:\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scr_ch_pg.dll]  [Kaspersky Lab, 1.0.6.297]
[C:\Kaspersky Lab\Kaspersky Anti-Virus 6.0\klscav.dll]  [Kaspersky Lab, 6.0.0.297]
[C:\Kaspersky Lab\Kaspersky Anti-Virus 6.0\pr_remote.dll]  [Kaspersky Lab, 6.0.0.297]
[C:\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prloader.dll]  [Kaspersky Lab, 6.0.0.297]
[C:\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prkernel.ppl]  [Kaspersky Lab, 6.0.0.297]
[c:\kaspersky lab\kaspersky anti-virus 6.0\params.ppl]  [Kaspersky Lab, 6.0.0.297]
[c:\kaspersky lab\kaspersky anti-virus 6.0\pxstub.ppl]  [Kaspersky Lab, 6.0.0.297]
[c:\kaspersky lab\kaspersky anti-virus 6.0\tempfile.ppl]  [Kaspersky Lab, 6.0.0.297]
[D:\Thunder\Plugins\BhoAdv\bho_adv.dll]  [深圳市迅雷网络技术有限公司, 1.0.1.0]
[c:\kaspersky lab\kaspersky anti-virus 6.0\nfio.ppl]  [Kaspersky Lab, 6.0.0.297]
[c:\kaspersky lab\kaspersky anti-virus 6.0\fsdrvplgn.ppl]  [Kaspersky Lab, 6.0.0.297]
[D:\Thunder\Plugins\ThunderKAV\ThunderKAV.dll]  [深圳市迅雷网络技术有限公司, 1.0.0.8]
[D:\Thunder\Program\XLNet.Dll]  [Xunlei, 1, 1, 0, 6]
[D:\Thunder\Plugins\ThunderKAV\bin\ikave.dll]  [, 5, 0, 0, 62]
[D:\Thunder\Plugins\ThunderKAV\bin\kave.dll]  [Kaspersky Lab., 5, 0, 0, 62]
[PID: 4016][D:\Thunder\Plugins\ThunderKAV\bin\ScanningProcess.exe]  [N/A, ]
[D:\Thunder\Plugins\ThunderKAV\bin\prloader.dll]  [Kaspersky Lab, 6.0.1.305]
[D:\Thunder\Plugins\ThunderKAV\bin\prkernel.ppl]  [Kaspersky Lab, 6.0.1.305]
[d:\thunder\plugins\thunderkav\bin\prefetch.ppl]  [Kaspersky Labs, 1, 0, 0, 56]
[d:\thunder\plugins\thunderkav\bin\avpmgr.ppl]  [Kaspersky Lab, 6.0.1.305]
[d:\thunder\plugins\thunderkav\bin\wdiskio.ppl]  [Kaspersky Lab, 6.0.0.276]
[d:\thunder\plugins\thunderkav\bin\nfio.ppl]  [Kaspersky Lab, 6.0.0.276]
[d:\thunder\plugins\thunderkav\bin\avlib.ppl]  [Kaspersky Lab, 6.0.0.276]
[d:\thunder\plugins\thunderkav\bin\dtreg.ppl]  [Kaspersky Lab, 6.0.0.276]
[d:\thunder\plugins\thunderkav\bin\prutil.ppl]  [Kaspersky Lab, 6.0.0.276]
[d:\thunder\plugins\thunderkav\bin\avp1.ppl]  [Kaspersky Lab, 6.0.0.299]
[d:\thunder\plugins\thunderkav\bin\l_llio.ppl]  [Kaspersky Labs, 6.0.9.75]
[d:\thunder\plugins\thunderkav\bin\ichstrms.ppl]  [Kaspersky Lab, 6.0.0.276]
[d:\thunder\plugins\thunderkav\bin\hashcont.ppl]  [Kaspersky Lab, 6.0.0.276]
[d:\thunder\plugins\thunderkav\bin\hccmp.ppl]  [Kaspersky Lab, 6.0.0.276]
[d:\thunder\plugins\thunderkav\bin\uniarc.ppl]  [Kaspersky Lab, 6.0.0.16]
[d:\thunder\plugins\thunderkav\bin\minizip.ppl]  [Kaspersky Lab, 6.0.0.16]
[d:\thunder\plugins\thunderkav\bin\cab.ppl]  [Kaspersky Lab, 6.0.0.16]
[d:\thunder\plugins\thunderkav\bin\arj.ppl]  [Kaspersky Lab, 6.0.0.16]
[d:\thunder\plugins\thunderkav\bin\rar.ppl]  [Kaspersky Lab, 6.0.0.276]
[d:\thunder\plugins\thunderkav\bin\mdb.ppl]  [Kaspersky Lab, 6.0.0.300]
[D:\WINDOWS\system32\MAPI32.dll]  [Microsoft Corporation, 1.0.2536.0 (XPClient.010817-1148)]
[d:\thunder\plugins\thunderkav\bin\msoe.ppl]  [Kaspersky Lab, 6.0.0.276]
[d:\thunder\plugins\thunderkav\bin\iwgen.ppl]  [Kaspersky Lab, 6.0.0.276]
[d:\thunder\plugins\thunderkav\bin\prseqio.ppl]  [Kaspersky Lab, 6.0.0.276]
[d:\thunder\plugins\thunderkav\bin\hashmd5.ppl]  [Kaspersky Lab, 6.0.0.276]
[d:\thunder\plugins\thunderkav\bin\inflate.ppl]  [Kaspersky Lab, 6.0.0.16]
[d:\thunder\plugins\thunderkav\bin\tempfile.ppl]  [Kaspersky Lab, 6.0.0.276]
[PID: 2956][D:\WinRAR\WinRAR.exe]  [N/A, ]
[D:\Program Files\MSN Messenger\fsshext.8.1.0178.00.dll]  [Microsoft Corporation, 8.1.0178.00]
[D:\WINDOWS\system32\Audiodev.dll]  [Microsoft Corporation, 5.2.3802.3802 built by: dnsrv(bld4act)]
[PID: 4020][D:\DOCUME~1\XU08CB~1.XU-\LOCALS~1\Temp\Rar$EX00.375\SREng.EXE]  [Smallfrogs Studio, 2.4.12.806]
[D:\DOCUME~1\XU08CB~1.XU-\LOCALS~1\Temp\Rar$EX00.375\Plugins\NWMON.SRE]  [Smallfrogs Studio, 1, 0, 0, 8]
==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["D:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1    localhost
==================================
API HOOK
RVA  错误： LoadLibraryA (危险等级: 一般,  被下面模块所HOOK: Dest Addr: 0xF3C5DB25)
RVA  错误： LoadLibraryExA (危险等级: 一般,  被下面模块所HOOK: Dest Addr: 0xF3C5DD67)
RVA  错误： LoadLibraryExW (危险等级: 一般,  被下面模块所HOOK: Dest Addr: 0xF3C5DF0B)
RVA  错误： LoadLibraryW (危险等级: 一般,  被下面模块所HOOK: Dest Addr: 0xF3C5DC49)
RVA  错误： GetProcAddress (危险等级: 高,  被下面模块所HOOK: Dest Addr: 0xF3C5DE8F)
==================================
隐藏进程
N/A
==================================