我已经重装系统了，楼主请锁帖！

显示全部楼层 · 发表于 2010-3-28 20:08:14

本帖最后由 000888 于 2010-4-13 23:53 编辑

[CODE]这不应该是中毒，我刚用小红伞扫描过！还用清理助手扫过，这到底是怎么回事啊？我512的内存，把除了杀毒软件外的所有程序都关了，也是460MB左右,以前最高才300多一点，这到底该怎么解决啊？
2010-03-28,19:54:51
System Repair Engineer 2.8.2.1321
Smallfrogs (http://www.KZTechs.com)
Windows XP Professional Service Pack 3 (Build 2600) - 管理权限用户 - 完整功能
以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件
进程特权扫描
计划任务
Windows 安全更新检查
API HOOK
隐藏进程

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
<racer><C:\Program Files\racer-ccn-racerpc-ha\racer.exe>  [Putian Runway]
<Shadow Defender Daemon><"C:\Program Files\Shadow Defender\DefenderDaemon.exe" /Auto>  [SHADOWDEFENDER.COM]
<avgnt><"C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min>  [Avira GmbH]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe>  [(Verified)Microsoft Windows Component Publisher]
<Userinit><C:\WINDOWS\SYSTEM32\USERINIT.EXE,>  [(Verified)Microsoft Windows Component Publisher]
<UIHost><logonui.exe>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{AEB6717E-7E19-11d0-97EE-00C04FD91972}><shell32.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
<PostBootReminder><%SystemRoot%\system32\SHELL32.dll>  [(Verified)Microsoft Windows Component Publisher]
<CDBurn><%SystemRoot%\system32\SHELL32.dll>  [(Verified)Microsoft Windows Component Publisher]
<WebCheck><%SystemRoot%\system32\webcheck.dll>  [(Verified)Microsoft Windows Component Publisher]
<SysTray><C:\WINDOWS\system32\stobject.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
<WinlogonNotify: crypt32chain><crypt32.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
<WinlogonNotify: cryptnet><cryptnet.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
<WinlogonNotify: cscdll><cscdll.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dimsntfy]
<WinlogonNotify: dimsntfy><%SystemRoot%\System32\dimsntfy.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
<WinlogonNotify: ScCertProp><wlnotify.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
<WinlogonNotify: Schedule><wlnotify.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
<WinlogonNotify: SensLogn><WlNotify.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
<WinlogonNotify: termsrv><wlnotify.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
<WinlogonNotify: wlballoon><wlnotify.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
<{438755C2-A8BA-11D1-B96B-00A0C90312E1}><%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Windows Component Publisher]
<{8C7461EF-2B13-11d2-BE35-3078302C2030}><%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
<Microsoft Windows Media Player><C:\WINDOWS\inf\unregmp2.exe /ShowWMP>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
<Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS]
<浏览器自定义组件><RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
<Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
<Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
<Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
<Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp10.inf,PerUserStub>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
<通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}]
<Windows 桌面更新><regsvr32.exe /s /n /i:U shell32.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}]
<Internet Explorer 6><%SystemRoot%\system32\ie4uinit.exe>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_CURRENT_USER\Control Panel\Desktop]
<SCRNSAVE.EXE><C:\WINDOWS\system32\ssmypics.scr>  [(Verified)Microsoft Windows Component Publisher]
==================================
启动文件夹
N/A
==================================
服务
[Avira AntiVir MailGuard / AntiVirMailService][Stopped/Disabled]
  <"C:\Program Files\Avira\AntiVir Desktop\avmailc.exe"><Avira GmbH>
[Avira AntiVir 计划程序 / AntiVirSchedulerService][Running/Auto Start]
  <"C:\Program Files\Avira\AntiVir Desktop\sched.exe"><Avira GmbH>
[Avira AntiVir Guard / AntiVirService][Running/Auto Start]
  <"C:\Program Files\Avira\AntiVir Desktop\avguard.exe"><Avira GmbH>
[Avira AntiVir WebGuard / AntiVirWebService][Stopped/Disabled]
  <"C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE"><Avira GmbH>
[DCOM Server Process Launcher / DcomLaunch][Running/Auto Start]
  <C:\WINDOWS\system32\svchost -k DcomLaunch-->%SystemRoot%\system32\rpcss.dll><Microsoft Corporation>
[Event Log / Eventlog][Stopped/Manual Start]
  <C:\WINDOWS\system32\services.exe><Microsoft Corporation>
[COM+ Event System / EventSystem][Running/Manual Start]
  <C:\WINDOWS\system32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\es.dll><Microsoft Corporation>
[MPSVC Service / MPSVCService][Running/Auto Start]
  <C:\Program Files\Micropoint\MPSVC.exe><Micropoint Corporation>
[Network Location Awareness (NLA) / Nla][Running/Manual Start]
  <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\mswsock.dll><Microsoft Corporation>
[NVIDIA Display Driver Service / NVSvc][Running/Auto Start]
  <C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>
[Plug and Play / PlugPlay][Running/Auto Start]
  <C:\WINDOWS\system32\services.exe><Microsoft Corporation>
[Remote Procedure Call (RPC) / RpcSs][Running/Auto Start]
  <C:\WINDOWS\system32\svchost -k rpcss-->%SystemRoot%\system32\rpcss.dll><Microsoft Corporation>
[Windows Firewall/Internet Connection Sharing (ICS) / SharedAccess][Running/Auto Start]
  <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\ipnathlp.dll><Microsoft Corporation>
[Windows Time / W32Time][Running/Auto Start]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\w32time.dll><Microsoft Corporation>
[Windows Management Instrumentation Driver Extensions / Wmi][Stopped/Manual Start]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\advapi32.dll><Microsoft Corporation>
[主动防御 / ZhuDongFangYu][Stopped/Manual Start]
  <"D:\360\360safe\deepscan\zhudongfangyu.exe"><360.cn>
==================================
驱动程序
[360netmon Service / 360netmon][Running/System Start]
  <\??\C:\WINDOWS\system32\drivers\360netmon.sys><360.cn>
[360SelfProtection / 360SelfProtection][Running/System Start]
  <system32\drivers\360SelfProtection.sys><360安全中心>
[aeaudio / aeaudio][Running/Manual Start]
  <system32\drivers\aeaudio.sys><Andrea Electronics Corporation>
[AFD / AFD][Running/System Start]
  <\SystemRoot\System32\drivers\afd.sys><Microsoft Corporation>
[AliIde / AliIde][Running/Boot Start]
  <\SystemRoot\system32\DRIVERS\aliide.sys><ALi Corporation>
[AMD Processor Driver / AmdK8][Running/System Start]
  <system32\DRIVERS\AmdK8.sys><Advanced Micro Devices>
[avgio / avgio][Running/System Start]
  <\??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys><Avira GmbH>
[avgntflt / avgntflt][Running/Auto Start]
  <system32\DRIVERS\avgntflt.sys><Avira GmbH>
[avipbb / avipbb][Running/System Start]
  <system32\DRIVERS\avipbb.sys><Avira GmbH>
[BAPIDRV / BAPIDRV][Running/System Start]
  <\??\C:\WINDOWS\system32\drivers\BAPIDRV.SYS><360.cn>
[ComputerZ / ComputerZ][Stopped/Manual Start]
  <\??\F:\系工具统\LuDaShi\ComputerZ.sys><鲁大师>
[diskpt / diskpt][Running/Boot Start]
  <\SystemRoot\SYSTEM32\drivers\diskpt.sys><SHADOWDEFENDER.COM>
[EfiSystemMon / EfiMon][Running/System Start]
  <System32\Drivers\Efimon.sys><奇虎网>
[Creative AudioPCI (ES1371,ES1373) (WDM) / es1371][Stopped/Manual Start]
  <system32\drivers\es1371mp.sys><Creative Technology Ltd.>
[HookPort / HookPort][Running/Boot Start]
  <\SystemRoot\System32\Drivers\Hookport.sys><360安全中心>
[m5289 / m5289][Running/Boot Start]
  <\SystemRoot\system32\DRIVERS\m5289.sys><ULi Electronics Inc.>
[mp110001 / mp110001][Running/Auto Start]
  <system32\drivers\mp110001.sys><Micropoint Corporation>
[mp110002 / mp110002][Running/Auto Start]
  <system32\drivers\mp110002.sys><Micropoint Corporation>
[mp110003 / mp110003][Running/Boot Start]
  <\SystemRoot\system32\drivers\mp110003.sys><Micropoint Corporation>
[mp110004 / mp110004][Running/Auto Start]
  <system32\drivers\mp110004.sys><Micropoint Corporation>
[mp110005 / mp110005][Running/Manual Start]
  <system32\drivers\mp110005.sys><Micropoint Corporation>
[mp110006 / mp110006][Running/System Start]
  <system32\drivers\mp110006.sys><Micropoint Corporation>
[mp110007 / mp110007][Running/System Start]
  <system32\drivers\mp110007.sys><Micropoint Corporation>
[mp110008 / mp110008][Running/Auto Start]
  <system32\drivers\mp110008.sys><Micropoint Corporation>
[mp110009 / mp110009][Running/System Start]
  <system32\drivers\mp110009.sys><Micropoint Corporation>
[mp110010 / mp110010][Running/Boot Start]
  <\SystemRoot\system32\drivers\mp110010.sys><Micropoint Corporation>
[mp110011 / mp110011][Running/System Start]
  <system32\drivers\mp110011.sys><Micropoint Corporation>
[mp110012 / mp110012][Running/Boot Start]
  <\SystemRoot\system32\drivers\mp110012.sys><Micropoint Corporation>
[mp110013 / mp110013][Running/Boot Start]
  <\SystemRoot\system32\drivers\mp110013.sys><Micropoint Corporation>
[NetGroup Packet Filter Driver / NPF][Running/Manual Start]
  <system32\drivers\npf.sys><CACE Technologies>
[nv / nv][Running/Manual Start]
  <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[NVIDIA nForce RAID Driver / nvrd32][Running/Boot Start]
  <\SystemRoot\system32\DRIVERS\nvrd32.sys><NVIDIA Corporation>
[AMD PCNET Compatable Adapter Driver / PCnet][Stopped/Manual Start]
  <system32\DRIVERS\pcntpci5.sys><AMD Inc.>
[PSTRIP / PSTRIP][Stopped/Auto Start]
  <\??\C:\WINDOWS\system32\DRIVERS\PSTRIP.SYS><N/A>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Secdrv / Secdrv][Stopped/Manual Start]
  <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
[SATALink driver accelerator / SiFilter][Stopped/Disabled]
  <\SystemRoot\system32\DRIVERS\SiWinAcc.sys><Silicon Image, Inc.>
[smwdm / smwdm][Running/Manual Start]
  <system32\drivers\smwdm.sys><Analog Devices, Inc.>
[ssmdrv / ssmdrv][Running/System Start]
  <system32\DRIVERS\ssmdrv.sys><Avira GmbH>
[TCP/IP Protocol Driver / Tcpip][Running/System Start]
  <system32\DRIVERS\tcpip.sys><Microsoft Corporation>
[ULi M526X Ethernet NT Driver / ULI5261XP][Running/Manual Start]
  <system32\DRIVERS\ULILAN51.SYS><ULi Electronics Inc.>
[ULi AGP Bus Filter Driver / uliagpkx][Running/Boot Start]
  <\SystemRoot\system32\DRIVERS\agpkx.sys><ULi Electronics Inc.>
[viamraid / viamraid][Stopped/Boot Start]
  <\SystemRoot\system32\DRIVERS\viamraid.sys><VIA Technologies inc,.ltd>
[VMware Pointing Device / vmmouse][Stopped/Manual Start]
  <system32\DRIVERS\vmmouse.sys><VMware, Inc.>
[VMware Ethernet Adapter Driver / vmxnet][Stopped/Manual Start]
  <system32\DRIVERS\vmxnet.sys><VMware, Inc.>
[vmx_svga / vmx_svga][Stopped/Manual Start]
  <system32\DRIVERS\vmx_svga.sys><VMware, Inc.>
==================================
浏览器加载项
[BitComet Helper]
  {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} <F:\系工具统\LuDaShi\新建文件夹\tools\bitcometbho.dll, (Signed) BitComet>
[]
  {53AC8551-0DE0-4606-8A1E-A51AF20ADD60} <, >
[启动迅雷5]
  {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <C:\Program Files\Thunder Network\Thunder\program\Thunder.exe, 深圳市迅雷网络技术有限公司>
[百度一下,你就知道]
  {6096E38F-5AC1-9527-8EC4-75DFA92FB32F} <http://www.baidu.com/index.php?tn=kzxf_pg, N/A>
[BitComet]
  {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} <, >
[Office Update Installation Engine]
  {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} <C:\WINDOWS\opuc.dll, Microsoft Corporation>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash10e.ocx, (Signed) Adobe Systems, Inc.>
[ThunderAtOnce Class]
  {01443AEC-0FD1-40FD-9C87-E93D1494C233} <C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll, (Signed) Thunder Networking Technologies,LTD>
[]
  {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <, >
[BitComet Helper]
  {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} <F:\系工具统\LuDaShi\新建文件夹\tools\bitcometbho.dll, (Signed) BitComet>
[Thunder Agent Class]
  {485463B7-8FB2-4B3B-B29B-8B919B0EACCE} <C:\Program Files\Thunder Network\Thunder\ComDlls\ThunderAgent_Now.dll, (Signed) Thunder Networking Technologies,LTD>
[]
  {53AC8551-0DE0-4606-8A1E-A51AF20ADD60} <, >
[]
  {6096E38F-5AC1-9527-8EC4-75DFA92FB32F} <, >
[XMP Class]
  {6483F145-A768-4C41-AACC-52D4D7845851} <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xplayer.dll_1_work, (Signed) ShenZhen Thunder Networking Technologies,LTD>
[360SafeLive]
  {87515F61-A66C-4319-A0E0-D416CB8059E3} <D:\360\360safe\Safelive.dll, (Signed) >
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll, (Signed) Thunder Networking Technologies,LTD>
[]
  {9701758C-4373-482E-B13C-776C048EC890} <, >
[]
  {ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8} <, >
[AUDIO__WAV Moniker Class]
  {CD3AFA7B-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
[]
  {D18A0B52-D63C-4ED0-AFC6-C1E3DC1AF43A} <, >
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash10e.ocx, (Signed) Adobe Systems, Inc.>
[]
  {E2E2DD38-D088-4134-82B7-F2BA38496583} <, >
[]
  {F3E70CEA-956E-49CC-B444-73AFE593AD7F} <, >
[&使用BitComet下载]
  <res://F:\系工具统\LuDaShi\新建文件夹\BitComet_Win9x.exe/AddLink.htm, N/A>
[&使用BitComet下载全部链接]
  <res://F:\系工具统\LuDaShi\新建文件夹\BitComet_Win9x.exe/AddAllLink.htm, N/A>
[&使用BitComet下载本页视频]
  <res://F:\系工具统\LuDaShi\新建文件夹\BitComet_Win9x.exe/AddVideo.htm, N/A>
[使用迅雷下载]
  <C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm, N/A>
[使用迅雷下载全部链接]
  <C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm, N/A>
[导出到 Microsoft Office Excel(&X)]
  <res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000, N/A>
[添加到QQ表情]
  <C:\Program Files\Tencent\QQ\Bin\AddEmotion.htm, N/A>
==================================
正在运行的进程
[PID: 636 / SYSTEM][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:\WINDOWS\system32\ntdll.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[PID: 716 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:\WINDOWS\system32\ntdll.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_qfe.081022-1941)]
[C:\WINDOWS\system32\KERNEL32.dll]  [Microsoft Corporation, 5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)]
[C:\WINDOWS\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\RPCRT4.dll]  [Microsoft Corporation, 5.1.2600.5795 (xpsp_sp3_qfe.090415-1301)]
[PID: 740 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)]
[C:\WINDOWS\system32\ntdll.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)]
[C:\WINDOWS\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\RPCRT4.dll]  [Microsoft Corporation, 5.1.2600.5795 (xpsp_sp3_qfe.090415-1301)]
[C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_qfe.081022-1941)]
[C:\WINDOWS\system32\NETAPI32.dll]  [Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_qfe.081015-1409)]
[C:\WINDOWS\system32\sfc_os.dll]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:\WINDOWS\system32\wbem\fastprox.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\NTDSAPI.dll]  [Microsoft Corporation, 5.1.2600.5582 (xpsp_sp3_qfe.080416-1432)]
[C:\WINDOWS\system32\DNSAPI.dll]  [Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)]
[PID: 784 / SYSTEM][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\ntdll.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)]
[C:\WINDOWS\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\RPCRT4.dll]  [Microsoft Corporation, 5.1.2600.5795 (xpsp_sp3_qfe.090415-1301)]
[C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_qfe.081022-1941)]
[C:\WINDOWS\system32\NETAPI32.dll]  [Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_qfe.081015-1409)]
[C:\Program Files\Micropoint\mp110031.dll]  [Micropoint Corporation, 2.0.34.1336]
[PID: 796 / SYSTEM][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)]
[C:\WINDOWS\system32\ntdll.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)]
[C:\WINDOWS\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\RPCRT4.dll]  [Microsoft Corporation, 5.1.2600.5795 (xpsp_sp3_qfe.090415-1301)]
[C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_qfe.081022-1941)]
[C:\WINDOWS\system32\NETAPI32.dll]  [Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_qfe.081015-1409)]
[C:\WINDOWS\system32\NTDSAPI.dll]  [Microsoft Corporation, 5.1.2600.5582 (xpsp_sp3_qfe.080416-1432)]
[C:\WINDOWS\system32\DNSAPI.dll]  [Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:\WINDOWS\system32\netlogon.dll]  [Microsoft Corporation, 5.1.2600.5582 (xpsp_sp3_qfe.080416-1432)]
[C:\WINDOWS\system32\w32time.dll]  [Microsoft Corporation, 5.1.2600.5582 (xpsp_sp3_qfe.080416-1432)]
[C:\WINDOWS\system32\mswsock.dll]  [Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)]
[PID: 972 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:\WINDOWS\system32\ntdll.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)]
[C:\WINDOWS\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\RPCRT4.dll]  [Microsoft Corporation, 5.1.2600.5795 (xpsp_sp3_qfe.090415-1301)]
[C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_qfe.081022-1941)]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[c:\windows\system32\rpcss.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\Program Files\Micropoint\mp110031.dll]  [Micropoint Corporation, 2.0.34.1336]
[C:\WINDOWS\system32\netapi32.dll]  [Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_qfe.081015-1409)]
[PID: 992 / SYSTEM][C:\Program Files\Micropoint\MPSVC.exe]  [Micropoint Corporation, 1,2,10581,51]
[C:\WINDOWS\system32\ntdll.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)]
[C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_qfe.081022-1941)]
[C:\WINDOWS\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\RPCRT4.dll]  [Microsoft Corporation, 5.1.2600.5795 (xpsp_sp3_qfe.090415-1301)]
[C:\Program Files\Micropoint\dbghelp.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Micropoint\MSVCP60.dll]  [Microsoft Corporation, 6.00.8168.0]
[C:\Program Files\Micropoint\mp110049.dll]  [Micropoint Corporation, 1,2,10581,1]
[C:\Program Files\Micropoint\mp110081.dll]  [Micropoint Corporation, 1,2,10581,4]
[C:\Program Files\Micropoint\mp110036.dll]  [Micropoint Corporation, 1.2.10076]
[C:\Program Files\Micropoint\mp110078.dll]  [Micropoint Corporation, 1.2.10581.2]
[C:\WINDOWS\system32\mswsock.dll]  [Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)]
[C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:\WINDOWS\system32\netapi32.dll]  [Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_qfe.081015-1409)]
[C:\Program Files\Micropoint\mp110048.dll]  [Micropoint Corporation, 1, 2, 10581, 4]
[C:\Program Files\Micropoint\mp110045.dll]  [Micropoint Corporation, 1, 2, 10573, 0]
[C:\Program Files\Micropoint\mp110039.dll]  [Micropoint Corporation, 1.2.10573.1]
[C:\Program Files\Micropoint\mp110046.dll]  [Micropoint Corporation, 1, 2, 10581, 6]
[C:\Program Files\Micropoint\mp110035.dll]  [Micropoint Corporation, 1.2.10051]
[C:\Program Files\Micropoint\mp110043.dll]  [Micropoint Corporation, 1,2,10581,4]
[C:\Program Files\Micropoint\mp110123.dll]  [Micropoint Corporation, 1.2.10002]
[C:\Program Files\Micropoint\mp110124.dll]  [Micropoint Corporation, 1,2,10581,5]
[C:\Program Files\Micropoint\mp110068.dll]  [Micropoint Corporation, 1, 2, 10581, 8]
[C:\Program Files\Micropoint\mp110082.dll]  [Micropoint Corporation, 1,2,10581,4]
[C:\WINDOWS\system32\DNSAPI.dll]  [Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)]
[PID: 1040 / SYSTEM][C:\Program Files\Micropoint\MPSVC2.exe]  [Micropoint Corporation, 1.2.10581.112]
[C:\WINDOWS\system32\ntdll.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)]
[C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_qfe.081022-1941)]
[C:\WINDOWS\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\RPCRT4.dll]  [Microsoft Corporation, 5.1.2600.5795 (xpsp_sp3_qfe.090415-1301)]
[C:\Program Files\Micropoint\dbghelp.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Micropoint\mp110030.dll]  [Micropoint Corporation, 1.2.10024]
[C:\Program Files\Micropoint\mp110037.dll]  [Micropoint Corporation, 1.2.10572.18]
[C:\Program Files\Micropoint\mp110078.dll]  [Micropoint Corporation, 1.2.10581.2]
[C:\Program Files\Micropoint\mp110028.dll]  [Micropoint Corporation, 1, 2, 10581, 1]
[C:\Program Files\Micropoint\mp110036.dll]  [Micropoint Corporation, 1.2.10076]
[C:\Program Files\Micropoint\mp110033.dll]  [Micropoint Corporation, 1,2,10581,11]
[C:\Program Files\Micropoint\mp110049.dll]  [Micropoint Corporation, 1,2,10581,1]
[C:\Program Files\Micropoint\mp110034.dll]  [Micropoint Corporation, 1.2.10120]
[C:\Program Files\Micropoint\mp110039.dll]  [Micropoint Corporation, 1.2.10573.1]
[C:\Program Files\Micropoint\mp110042.dll]  [Micropoint Corporation, 1, 2, 10035, 0]
[C:\Program Files\Micropoint\mp110071.dll]  [Micropoint Corporation, 1.2.10018]
[C:\Program Files\Micropoint\mp110118.dll]  [Micropoint Corporation, 1, 2, 10580, 5]
[C:\Program Files\Micropoint\MSVCP60.dll]  [Microsoft Corporation, 6.00.8168.0]
[C:\Program Files\Micropoint\mp110073.dll]  [Micropoint Corporation, 1,2,10571,2]
[C:\WINDOWS\system32\NETAPI32.dll]  [Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_qfe.081015-1409)]
[C:\Program Files\Micropoint\mp110075.dll]  [Micropoint Corporation, 1.2.10012]
[C:\Program Files\Micropoint\mp110081.dll]  [Micropoint Corporation, 1,2,10581,4]
[C:\Program Files\Micropoint\mp110124.dll]  [Micropoint Corporation, 1,2,10581,5]
[C:\Program Files\Micropoint\mp110125.dll]  [Micropoint Corporation, 1.2.10572.3]
[C:\Program Files\Micropoint\mp110029.dll]  [Micropoint Corporation, 1.2.10009]
[C:\Program Files\Micropoint\mp110077.dll]  [Micropoint Corporation, 1,2,10571,5]
[C:\Program Files\Micropoint\mp110031.dll]  [Micropoint Corporation, 2.0.34.1336]
[C:\WINDOWS\system32\mswsock.dll]  [Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)]
[C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 1216 / SYSTEM][C:\Program Files\Micropoint\MPSVC1.exe]  [Micropoint Corporation, 1.2.10097]
[C:\WINDOWS\system32\ntdll.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)]
[C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_qfe.081022-1941)]
[C:\WINDOWS\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\RPCRT4.dll]  [Microsoft Corporation, 5.1.2600.5795 (xpsp_sp3_qfe.090415-1301)]
[C:\Program Files\Micropoint\mp110049.dll]  [Micropoint Corporation, 1,2,10581,1]
[C:\Program Files\Micropoint\mp110081.dll]  [Micropoint Corporation, 1,2,10581,4]
[C:\Program Files\Micropoint\mp110078.dll]  [Micropoint Corporation, 1.2.10581.2]
[C:\Program Files\Micropoint\mp110072.dll]  [Micropoint Corporation, 1.2.10033]
[C:\WINDOWS\system32\mswsock.dll]  [Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)]
[PID: 1232 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:\WINDOWS\system32\ntdll.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)]
[C:\WINDOWS\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\RPCRT4.dll]  [Microsoft Corporation, 5.1.2600.5795 (xpsp_sp3_qfe.090415-1301)]
[C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_qfe.081022-1941)]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:\Program Files\Micropoint\mp110031.dll]  [Micropoint Corporation, 2.0.34.1336]
[C:\WINDOWS\system32\netapi32.dll]  [Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_qfe.081015-1409)]
[c:\windows\system32\rpcss.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\mswsock.dll]  [Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)]
[C:\WINDOWS\system32\DNSAPI.dll]  [Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)]
[PID: 948 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:\WINDOWS\system32\ntdll.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)]
[C:\WINDOWS\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\RPCRT4.dll]  [Microsoft Corporation, 5.1.2600.5795 (xpsp_sp3_qfe.090415-1301)]
[C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_qfe.081022-1941)]
[C:\WINDOWS\System32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:\Program Files\Micropoint\mp110031.dll]  [Micropoint Corporation, 2.0.34.1336]
[C:\WINDOWS\system32\netapi32.dll]  [Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_qfe.081015-1409)]
[c:\windows\system32\DNSAPI.dll]  [Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)]
[c:\windows\system32\NTDSAPI.dll]  [Microsoft Corporation, 5.1.2600.5582 (xpsp_sp3_qfe.080416-1432)]
[c:\windows\system32\w32time.dll]  [Microsoft Corporation, 5.1.2600.5582 (xpsp_sp3_qfe.080416-1432)]
[C:\WINDOWS\system32\mswsock.dll]  [Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)]
[C:\WINDOWS\system32\es.dll]  [Microsoft Corporation, 2001.12.4414.706]
[c:\windows\system32\ipnathlp.dll]  [Microsoft Corporation, 5.1.2600.5584 (xpsp_sp3_qfe.080421-1413)]
[C:\WINDOWS\system32\MTXCLU.DLL]  [Microsoft Corporation, 2001.12.4414.706]
[C:\WINDOWS\System32\Wbem\FastProx.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\wbem\wmiprvsd.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\WINHTTP.dll]  [Microsoft Corporation, 5.1.2600.5727 (xpsp_sp3_qfe.081215-1350)]
[C:\WINDOWS\System32\sfc_os.dll]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:\WINDOWS\system32\msxml3.dll]  [Microsoft Corporation, 8.100.1048.0]
[PID: 340 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:\WINDOWS\system32\ntdll.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)]
[C:\WINDOWS\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\RPCRT4.dll]  [Microsoft Corporation, 5.1.2600.5795 (xpsp_sp3_qfe.090415-1301)]
[C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_qfe.081022-1941)]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:\Program Files\Micropoint\mp110031.dll]  [Micropoint Corporation, 2.0.34.1336]
[c:\windows\system32\DNSAPI.dll]  [Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)]
[C:\WINDOWS\system32\netapi32.dll]  [Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_qfe.081015-1409)]
[C:\WINDOWS\system32\mswsock.dll]  [Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)]
[PID: 476 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]

显示全部楼层 · 发表于 2010-3-28 20:08:58

[C:\WINDOWS\system32\ntdll.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)]
[C:\WINDOWS\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\RPCRT4.dll]  [Microsoft Corporation, 5.1.2600.5795 (xpsp_sp3_qfe.090415-1301)]
[C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_qfe.081022-1941)]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:\Program Files\Micropoint\mp110031.dll]  [Micropoint Corporation, 2.0.34.1336]
[C:\WINDOWS\system32\netapi32.dll]  [Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_qfe.081015-1409)]
[C:\WINDOWS\system32\mswsock.dll]  [Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)]
[PID: 572 / SYSTEM][C:\Program Files\Avira\AntiVir Desktop\sched.exe]  [Avira GmbH, 9.00.00.09]
[C:\WINDOWS\system32\ntdll.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)]
[C:\WINDOWS\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\RPCRT4.dll]  [Microsoft Corporation, 5.1.2600.5795 (xpsp_sp3_qfe.090415-1301)]
[C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_qfe.081022-1941)]
[C:\Program Files\Avira\AntiVir Desktop\schedr.dll]  [Avira GmbH, 8.00.05.00]
[C:\WINDOWS\system32\NETAPI32.dll]  [Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_qfe.081015-1409)]
[C:\Program Files\Avira\AntiVir Desktop\avevtlog.dll]  [Avira GmbH, 9.00.00.07]
[C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll]  [, 3.06.01.00]
[C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:\WINDOWS\system32\WINHTTP.dll]  [Microsoft Corporation, 5.1.2600.5727 (xpsp_sp3_qfe.081215-1350)]
[PID: 696 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:\WINDOWS\system32\ntdll.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)]
[C:\WINDOWS\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\RPCRT4.dll]  [Microsoft Corporation, 5.1.2600.5795 (xpsp_sp3_qfe.090415-1301)]
[C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_qfe.081022-1941)]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:\Program Files\Micropoint\mp110031.dll]  [Micropoint Corporation, 2.0.34.1336]
[C:\WINDOWS\system32\netapi32.dll]  [Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_qfe.081015-1409)]
[PID: 1340 / SYSTEM][C:\Program Files\Avira\AntiVir Desktop\avguard.exe]  [Avira GmbH, 9.00.01.32]
[C:\WINDOWS\system32\ntdll.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)]
[C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_qfe.081022-1941)]
[C:\WINDOWS\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\RPCRT4.dll]  [Microsoft Corporation, 5.1.2600.5795 (xpsp_sp3_qfe.090415-1301)]
[C:\WINDOWS\system32\NETAPI32.dll]  [Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_qfe.081015-1409)]
[C:\Program Files\Avira\AntiVir Desktop\AVEvtLog.dll]  [Avira GmbH, 9.00.00.07]
[C:\Program Files\Avira\AntiVir Desktop\guardmsg.dll]  [Avira GmbH, 9.00.02.00]
[C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll]  [, 3.06.01.00]
[C:\Program Files\Avira\AntiVir Desktop\AVPREF.DLL]  [Avira GmbH, 9.00.03.00]
[C:\Program Files\Avira\AntiVir Desktop\SMTPLIB.DLL]  [Avira GmbH, 9.02.00.25]
[C:\Program Files\Avira\AntiVir Desktop\AVGIO.DLL]  [Avira GmbH, 9.00.01.04]
[C:\Program Files\Avira\AntiVir Desktop\avipc.dll]  [Avira GmbH, 1.1.3.4]
[C:\Program Files\Avira\AntiVir Desktop\aecore.dll]  [Avira GmbH, 8.1.12.3]
[C:\Program Files\Avira\AntiVir Desktop\aevdf.dll]  [Avira GmbH, 8.1.1.3]
[C:\Program Files\Avira\AntiVir Desktop\aescript.dll]  [Avira GmbH, 8.1.3.23]
[C:\Program Files\Avira\AntiVir Desktop\aescn.dll]  [Avira GmbH, 8.1.5.0]
[C:\Program Files\Avira\AntiVir Desktop\aesbx.dll]  [Avira GmbH, 8.1.2.1]
[C:\Program Files\Avira\AntiVir Desktop\aerdl.dll]  [Avira GmbH, 8.1.4.3]
[C:\Program Files\Avira\AntiVir Desktop\aepack.dll]  [Avira GmbH, 8.2.1.1]
[C:\Program Files\Avira\AntiVir Desktop\unacev2.dll]  [ACE Compression Software, 2.6.0.2]
[C:\Program Files\Avira\AntiVir Desktop\aeoffice.dll]  [Avira GmbH, 8.1.0.41]
[C:\Program Files\Avira\AntiVir Desktop\aeheur.dll]  [Avira GmbH, 8.1.1.16]
[C:\Program Files\Avira\AntiVir Desktop\aehelp.dll]  [Avira GmbH, 8.1.10.2]
[C:\Program Files\Avira\AntiVir Desktop\aegen.dll]  [Avira GmbH, 8.1.3.2]
[C:\Program Files\Avira\AntiVir Desktop\aeemu.dll]  [Avira GmbH, 8.1.1.0]
[C:\Program Files\Avira\AntiVir Desktop\aebb.dll]  [Avira GmbH, 8.1.0.3]
[PID: 1640 / SYSTEM][C:\WINDOWS\system32\nvsvc32.exe]  [NVIDIA Corporation, 6.14.10.7189]
[C:\WINDOWS\system32\ntdll.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)]
[C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_qfe.081022-1941)]
[C:\WINDOWS\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\RPCRT4.dll]  [Microsoft Corporation, 5.1.2600.5795 (xpsp_sp3_qfe.090415-1301)]
[C:\Program Files\Micropoint\mp110031.dll]  [Micropoint Corporation, 2.0.34.1336]
[C:\WINDOWS\system32\NETAPI32.dll]  [Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_qfe.081015-1409)]
[C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:\WINDOWS\system32\NVRSZHC.DLL]  [NVIDIA Corporation, 6.14.10.7189]
[PID: 1676 / LOCAL SERVICE][C:\WINDOWS\system32\wdfmgr.exe]  [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
[C:\WINDOWS\system32\ntdll.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)]
[C:\WINDOWS\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\RPCRT4.dll]  [Microsoft Corporation, 5.1.2600.5795 (xpsp_sp3_qfe.090415-1301)]
[C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_qfe.081022-1941)]
[PID: 1436 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852)]
[C:\WINDOWS\system32\ntdll.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)]
[C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_qfe.081022-1941)]
[C:\WINDOWS\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\RPCRT4.dll]  [Microsoft Corporation, 5.1.2600.5795 (xpsp_sp3_qfe.090415-1301)]
[C:\WINDOWS\System32\MSWSOCK.DLL]  [Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)]
[C:\WINDOWS\System32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:\Program Files\Micropoint\mp110031.dll]  [Micropoint Corporation, 2.0.34.1336]
[PID: 200 / Administrator][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:\WINDOWS\system32\ntdll.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)]
[C:\WINDOWS\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\RPCRT4.dll]  [Microsoft Corporation, 5.1.2600.5795 (xpsp_sp3_qfe.090415-1301)]
[C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_qfe.081022-1941)]
[C:\WINDOWS\system32\NETAPI32.dll]  [Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_qfe.081015-1409)]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:\Program Files\Micropoint\mp110031.dll]  [Micropoint Corporation, 2.0.34.1336]
[C:\WINDOWS\system32\shdoclc.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:\WINDOWS\system32\browselc.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 1776 / Administrator][C:\Program Files\Micropoint\MPMon.exe]  [Micropoint Corporation, 1,2,10581,17]
[C:\WINDOWS\system32\ntdll.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)]
[C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_qfe.081022-1941)]
[C:\WINDOWS\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\RPCRT4.dll]  [Microsoft Corporation, 5.1.2600.5795 (xpsp_sp3_qfe.090415-1301)]
[C:\Program Files\Micropoint\mp110036.dll]  [Micropoint Corporation, 1.2.10076]
[C:\Program Files\Micropoint\mp110078.dll]  [Micropoint Corporation, 1.2.10581.2]
[C:\Program Files\Micropoint\mp110049.dll]  [Micropoint Corporation, 1,2,10581,1]
[C:\Program Files\Micropoint\mp110079.dll]  [Micropoint Corporation, 1.2.10004]
[C:\Program Files\Micropoint\mp110081.dll]  [Micropoint Corporation, 1,2,10581,4]
[C:\Program Files\Micropoint\dbghelp.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Micropoint\mp110051.dll]  [Micropoint Corporation, 1,2,10581,3]
[C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:\WINDOWS\system32\mswsock.dll]  [Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)]
[PID: 1816 / Administrator][C:\Program Files\racer-ccn-racerpc-ha\racer.exe]  [Putian Runway, 3,3,130,306]
[C:\WINDOWS\system32\ntdll.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)]
[C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_qfe.081022-1941)]
[C:\WINDOWS\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\RPCRT4.dll]  [Microsoft Corporation, 5.1.2600.5795 (xpsp_sp3_qfe.090415-1301)]
[C:\Program Files\Micropoint\mp110031.dll]  [Micropoint Corporation, 2.0.34.1336]
[C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:\Program Files\racer-ccn-racerpc-ha\rwxre.dll]  [Putian Runway, 3,3,130,306]
[C:\Program Files\racer-ccn-racerpc-ha\nspr4.dll]  [Netscape Communications Corporation, 4.6.1]
[C:\Program Files\racer-ccn-racerpc-ha\xpcom_core.dll]  [Mozilla Foundation, Personal]
[C:\Program Files\racer-ccn-racerpc-ha\plc4.dll]  [Netscape Communications Corporation, 4.6.1]
[C:\Program Files\racer-ccn-racerpc-ha\plds4.dll]  [Netscape Communications Corporation, 4.6.1]
[C:\Program Files\racer-ccn-racerpc-ha\nss3.dll]  [Netscape Communications Corporation, 3.10.2]
[C:\Program Files\racer-ccn-racerpc-ha\softokn3.dll]  [Netscape Communications Corporation, 3.10.2]
[C:\Program Files\racer-ccn-racerpc-ha\js3250.dll]  [Netscape Communications Corporation, 4.0]
[C:\Program Files\racer-ccn-racerpc-ha\gkgfx.dll]  [Mozilla Foundation, Personal]
[C:\Program Files\racer-ccn-racerpc-ha\xpcom_compat.dll]  [Mozilla Foundation, Personal]
[C:\Program Files\racer-ccn-racerpc-ha\smime3.dll]  [Netscape Communications Corporation, 3.10.2]
[C:\Program Files\racer-ccn-racerpc-ha\ssl3.dll]  [Netscape Communications Corporation, 3.10.2]
[C:\WINDOWS\system32\mswsock.dll]  [Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)]
[C:\Program Files\racer-ccn-racerpc-ha\components\racer_base_comp.dll]  [Putian Runway, 3,3,130,306]
[C:\Program Files\racer-ccn-racerpc-ha\racer_base.dll]  [Putian Runway, 3,3,130,306]
[C:\Program Files\racer-ccn-racerpc-ha\kbdhook.dll]  [Putian Runway, 3,3,130,306]
[C:\Program Files\racer-ccn-racerpc-ha\components\jar50.dll]  [Mozilla Foundation, Personal]
[C:\Program Files\racer-ccn-racerpc-ha\components\gklayout.dll]  [Mozilla Foundation, Personal]
[C:\Program Files\racer-ccn-racerpc-ha\nssckbi.dll]  [Netscape Communications Corporation, 1.53]
[C:\Program Files\racer-ccn-racerpc-ha\components\racer_ad_comp.dll]  [Putian Runway, 3,3,130,306]
[C:\Program Files\racer-ccn-racerpc-ha\components\racer_access_pppoe.dll]  [Putian Runway, 3,3,130,325]
[C:\Program Files\racer-ccn-racerpc-ha\pppoe.dll]  [北京润汇科技有限公司, 9, 0, 22, 50]
[C:\WINDOWS\system32\NETAPI32.dll]  [Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_qfe.081015-1409)]
[C:\Program Files\racer-ccn-racerpc-ha\components\racer_nss4_comp.dll]  [Putian Runway, 3,3,130,306]
[C:\Program Files\racer-ccn-racerpc-ha\nss4.dll]  [北京润汇科技有限公司, 1, 0, 0, 4]
[C:\Program Files\racer-ccn-racerpc-ha\wpcap.dll]  [CACE Technologies, 3, 2, 0, 29]
[C:\Program Files\racer-ccn-racerpc-ha\packet.dll]  [CACE Technologies, 3, 2, 0, 29]
[C:\Program Files\racer-ccn-racerpc-ha\WanPacket.dll]  [CACE Technologies, 3, 2, 0, 29]
[C:\WINDOWS\system32\DNSAPI.dll]  [Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)]
[C:\Program Files\racer-ccn-racerpc-ha\plugins\NPSWF32.dll]  [, ]
[PID: 1940 / Administrator][C:\Program Files\Shadow Defender\DefenderDaemon.exe]  [SHADOWDEFENDER.COM, 1.1.0.325]
[C:\WINDOWS\system32\ntdll.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)]
[C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_qfe.081022-1941)]
[C:\WINDOWS\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\RPCRT4.dll]  [Microsoft Corporation, 5.1.2600.5795 (xpsp_sp3_qfe.090415-1301)]
[C:\Program Files\Micropoint\mp110031.dll]  [Micropoint Corporation, 2.0.34.1336]
[C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:\Program Files\Shadow Defender\ShellExt.dll]  [SHADOWDEFENDER.COM, 1.1.0.325]
[PID: 540 / Administrator][C:\Program Files\Avira\AntiVir Desktop\avgnt.exe]  [Avira GmbH, 9.00.00.12]
[C:\WINDOWS\system32\ntdll.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)]
[C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_qfe.081022-1941)]
[C:\WINDOWS\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\RPCRT4.dll]  [Microsoft Corporation, 5.1.2600.5795 (xpsp_sp3_qfe.090415-1301)]
[C:\Program Files\Avira\AntiVir Desktop\cclib.dll]  [Avira GmbH, 9.00.00.10]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[c:\program files\avira\antivir desktop\ccgen.dll]  [Avira GmbH, 9.00.00.35]
[c:\program files\avira\antivir desktop\ccgenrc.dll]  [Avira GmbH, 9.00.17.02]
[c:\program files\avira\antivir desktop\ccguard.dll]  [Avira GmbH, 9.00.00.19]
[c:\program files\avira\antivir desktop\ccgrdrc.dll]  [Avira GmbH, 9.00.06.02]
[c:\program files\avira\antivir desktop\avipc.dll]  [Avira GmbH, 1.1.3.4]
[c:\program files\avira\antivir desktop\ccupdate.dll]  [Avira GmbH, 9.00.00.16]
[c:\program files\avira\antivir desktop\ccupdrc.dll]  [Avira GmbH, 9.00.06.02]
[c:\program files\avira\antivir desktop\cclic.dll]  [Avira GmbH, 9.00.00.06]
[c:\program files\avira\antivir desktop\cclicrc.dll]  [Avira GmbH, 9.00.01.00]
[c:\program files\avira\antivir desktop\ccmsg.dll]  [Avira GmbH, 9.00.02.01]
[C:\WINDOWS\system32\NETAPI32.dll]  [Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_qfe.081015-1409)]
[PID: 1980 / Administrator][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)]
[C:\WINDOWS\system32\ntdll.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)]
[C:\WINDOWS\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\RPCRT4.dll]  [Microsoft Corporation, 5.1.2600.5795 (xpsp_sp3_qfe.090415-1301)]
[C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_qfe.081022-1941)]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 3112 / Administrator][C:\WINDOWS\system32\rundll32.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)]
[C:\WINDOWS\system32\ntdll.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)]
[C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_qfe.081022-1941)]
[C:\WINDOWS\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\RPCRT4.dll]  [Microsoft Corporation, 5.1.2600.5795 (xpsp_sp3_qfe.090415-1301)]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:\Program Files\Micropoint\mp110031.dll]  [Micropoint Corporation, 2.0.34.1336]
[C:\PROGRA~1\RACER-~1\pppoe.dll]  [北京润汇科技有限公司, 9, 0, 22, 50]
[C:\WINDOWS\system32\NETAPI32.dll]  [Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_qfe.081015-1409)]
[PID: 2676 / Administrator][C:\WINDOWS\system32\taskmgr.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)]
[C:\WINDOWS\system32\ntdll.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)]
[C:\WINDOWS\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\RPCRT4.dll]  [Microsoft Corporation, 5.1.2600.5795 (xpsp_sp3_qfe.090415-1301)]
[C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_qfe.081022-1941)]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:\WINDOWS\system32\NETAPI32.dll]  [Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_qfe.081015-1409)]
[PID: 3460 / Administrator][F:\系工具统\WoptiUtilities\SREngLdr.EXE]  [Smallfrogs Studio, 2.8.2.1321]
[C:\WINDOWS\system32\ntdll.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)]
[C:\WINDOWS\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\RPCRT4.dll]  [Microsoft Corporation, 5.1.2600.5795 (xpsp_sp3_qfe.090415-1301)]
[C:\Program Files\Micropoint\mp110031.dll]  [Micropoint Corporation, 2.0.34.1336]
[C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_qfe.081022-1941)]
[PID: 3016 / Administrator][F:\系工具统\WoptiUtilities\SREe95ab5d6.EXE]  [Smallfrogs Studio, 2.8.2.1321]
[C:\WINDOWS\system32\ntdll.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)]
[C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_qfe.081022-1941)]
[C:\WINDOWS\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[C:\WINDOWS\system32\RPCRT4.dll]  [Microsoft Corporation, 5.1.2600.5795 (xpsp_sp3_qfe.090415-1301)]
[C:\Program Files\Micropoint\mp110031.dll]  [Micropoint Corporation, 2.0.34.1336]
[C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:\WINDOWS\system32\sfc_os.dll]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[F:\系工具统\WoptiUtilities\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]
[C:\WINDOWS\system32\NETAPI32.dll]  [Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_qfe.081015-1409)]
[C:\WINDOWS\System32\mswsock.dll]  [Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)]
[C:\WINDOWS\system32\DNSAPI.dll]  [Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)]
[C:\WINDOWS\system32\WINHTTP.dll]  [Microsoft Corporation, 5.1.2600.5727 (xpsp_sp3_qfe.081215-1350)]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
MSAFD Tcpip [TCP/IP]
C:\WINDOWS\system32\mswsock.dll(Microsoft Corporation, Microsoft Windows Sockets 2.0 Service Provider)
MSAFD Tcpip [UDP/IP]
C:\WINDOWS\system32\mswsock.dll(Microsoft Corporation, Microsoft Windows Sockets 2.0 Service Provider)
MSAFD Tcpip [RAW/IP]
C:\WINDOWS\system32\mswsock.dll(Microsoft Corporation, Microsoft Windows Sockets 2.0 Service Provider)
MSAFD NetBIOS [\Device\NetBT_Tcpip_{AEDF7EEC-1E07-418B-912C-1450777F5178}] SEQPACKET 0
C:\WINDOWS\system32\mswsock.dll(Microsoft Corporation, Microsoft Windows Sockets 2.0 Service Provider)
MSAFD NetBIOS [\Device\NetBT_Tcpip_{AEDF7EEC-1E07-418B-912C-1450777F5178}] DATAGRAM 0
C:\WINDOWS\system32\mswsock.dll(Microsoft Corporation, Microsoft Windows Sockets 2.0 Service Provider)
MSAFD NetBIOS [\Device\NetBT_Tcpip_{C6904788-DDCD-4AE5-B582-17805B3DCCD1}] SEQPACKET 1
C:\WINDOWS\system32\mswsock.dll(Microsoft Corporation, Microsoft Windows Sockets 2.0 Service Provider)
MSAFD NetBIOS [\Device\NetBT_Tcpip_{C6904788-DDCD-4AE5-B582-17805B3DCCD1}] DATAGRAM 1
C:\WINDOWS\system32\mswsock.dll(Microsoft Corporation, Microsoft Windows Sockets 2.0 Service Provider)
MSAFD NetBIOS [\Device\NetBT_Tcpip_{0DA1B816-3914-429A-9926-9F176B69368B}] SEQPACKET 2
C:\WINDOWS\system32\mswsock.dll(Microsoft Corporation, Microsoft Windows Sockets 2.0 Service Provider)
MSAFD NetBIOS [\Device\NetBT_Tcpip_{0DA1B816-3914-429A-9926-9F176B69368B}] DATAGRAM 2
C:\WINDOWS\system32\mswsock.dll(Microsoft Corporation, Microsoft Windows Sockets 2.0 Service Provider)
MSAFD NetBIOS [\Device\NetBT_Tcpip_{C629F1C5-5AAA-4F57-870F-B51F69AD25A4}] SEQPACKET 3
C:\WINDOWS\system32\mswsock.dll(Microsoft Corporation, Microsoft Windows Sockets 2.0 Service Provider)
MSAFD NetBIOS [\Device\NetBT_Tcpip_{C629F1C5-5AAA-4F57-870F-B51F69AD25A4}] DATAGRAM 3
C:\WINDOWS\system32\mswsock.dll(Microsoft Corporation, Microsoft Windows Sockets 2.0 Service Provider)
MSAFD NetBIOS [\Device\NetBT_Tcpip_{93D7CA6C-58D7-4065-B59C-0FF3A30DB0AB}] SEQPACKET 4
C:\WINDOWS\system32\mswsock.dll(Microsoft Corporation, Microsoft Windows Sockets 2.0 Service Provider)
MSAFD NetBIOS [\Device\NetBT_Tcpip_{93D7CA6C-58D7-4065-B59C-0FF3A30DB0AB}] DATAGRAM 4
C:\WINDOWS\system32\mswsock.dll(Microsoft Corporation, Microsoft Windows Sockets 2.0 Service Provider)

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1    localhost

==================================
进程特权扫描
特殊特权被允许： SeLoadDriverPrivilege [PID = 572, C:\PROGRAM FILES\AVIRA\ANTIVIR DESKTOP\SCHED.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1340, C:\PROGRAM FILES\AVIRA\ANTIVIR DESKTOP\AVGUARD.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1816, C:\PROGRAM FILES\RACER-CCN-RACERPC-HA\RACER.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 540, C:\PROGRAM FILES\AVIRA\ANTIVIR DESKTOP\AVGNT.EXE]

==================================
计划任务
N/A

==================================
Windows 安全更新检查
Microsoft .NET Framework 版本 1.1，简体中文版
KB925850,  Windows Media Player 11
KB940157,  用于 Windows XP 的 Windows 搜索 4.0 (KB940157)
KB902344,  启用了 WMDRM 的 Media Player 更新程序 (KB902344)
KB905474,  Windows Genuine Advantage 通知 (KB905474)
KB909520,  Microsoft 基本智能卡加密服务提供程序包： x86 (KB909520)
KB951847,  Microsoft .NET Framework 3.5 Service Pack 1 和 .NET Framework 3.5 Family Update (KB951847) x86
KB944036,  用于 Windows XP 的 Internet Explorer 8
KB956844,  Windows XP 安全更新程序 (KB956844) MS09-046
KB971961,  用于 Windows XP 的 Jscript 5.7 的安全更新程序 (KB971961) MS09-045
KB968816,  用于 Windows XP SP 3 的 Windows Media Format Runtime 9、9.5 和 11 的安全更新程序 (KB968816) MS09-047
KB954155,  用于 Windows XP SP 3 的 Windows Media Format Runtime 9、9.5 和 11 的安全更新程序 (KB954155) MS09-051
KB974112,  Windows XP 安全更新程序 (KB974112) MS09-052
KB969059,  Windows XP 安全更新程序 (KB969059) MS09-057
KB973687,  Windows XP 更新程序 (KB973687)
KB931125,  根证书更新 [2009 年 11 月] (KB931125)
KB970430,  Windows XP 更新程序 (KB970430)
KB971737,  Windows XP 更新程序 (KB971737)
KB955759,  Windows XP 更新程序 (KB955759)
KB973904,  Windows XP 安全更新程序 (KB973904) MS09-073
KB971513,  Windows XP 更新程序 (KB971513)
KB979306,  Windows XP 更新程序 (KB979306)
KB977165,  Windows XP 安全更新程序 (KB977165) MS10-015
KB890830,  Windows 恶意软件删除工具 - 2010 年 3 月 (KB890830)

==================================
API HOOK
N/A

==================================
隐藏进程
N/A

==================================

[/CODE]

显示全部楼层 · 发表于 2010-4-13 22:08:46

系统中木马了。

显示全部楼层 · 发表于 2010-4-13 23:52:01

系统中木马了。
njyuchao 发表于 2010-4-13 22:08

我已经重装系统了，还是谢谢楼主！

显示全部楼层 · 发表于 2010-4-14 00:13:48

LZ 下载360安全卫士7.0正式版扫描木马

安装超级巡警最新版本

而且这两个安全软件貌似不冲突

[已解决] 我已经重装系统了，楼主请锁帖！