|
|
- 8 }3 _1 h( Q0 G5 z0 d {2 Z6 w$ C
- 2008-05-22,20:37:43 g2 v/ s) S$ _. d
- System Repair Engineer 2.5.16.900
% ^1 x4 c' u( F$ |+ d* B& [7 _( I9 b; D+ p - Smallfrogs (http://www.KZTechs.com)
4 n& ^! C: x7 |9 s9 a, P$ L& } - Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能
7 S) R& q! K2 K7 x* o$ p$ x - 以下内容被选中:
9 [4 ]+ I! }7 |$ F( V* W - 所有的启动项目(包括注册表、启动文件夹、服务等)
- }' q6 v4 d. v. [% r' n J; X* p6 R - 浏览器加载项
q Y# t1 p6 T" U) u - 正在运行的进程(包括进程模块信息)
5 m( n; N1 c" D7 G+ _. ] - 文件关联0 M% [. @" }, m% u( `
- Winsock 提供者/ N1 v. M4 S% m7 `! m4 j2 o
- Autorun.inf' O9 q3 k# U# [+ d
- HOSTS 文件" U' J* `/ ~# i
- 进程特权扫描
- {% x# }) F+ u4 S, ?9 ? - ; X" t, b4 j* C, Z! T
- 启动项目
6 i$ a3 _6 ^: H# g4 v4 a A- } - 注册表
@8 O7 i6 M" Q# g' t. C2 z - [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]6 B+ y8 f" o5 x f$ q0 ~. q. J
- <ctfmon.exe><C:\WINDOWS\system32\CTFMON.EXE> [(Verified)Microsoft Windows Publisher]
9 p+ `$ o# \* y( A1 T - [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
2 \, P+ z) d _5 C# a# p - <360Safebox><"C:\Program Files\360Safebox\safeboxTray.exe" /r> [(Verified)Qizhi Software (beijing) Co. Ltd]
0 c" ]+ E2 b8 k6 k+ F2 q - <360Safetray><C:\Program Files\360safe\safemon\360tray.exe /start> [(Verified)Qizhi Software (beijing) Co. Ltd]# @% }! n+ Y/ c! L- O1 O8 s; R2 a
- <360Antiarp><C:\Program Files\360safe\AntiArp\AntiArp.exe /start> [(Verified)Qizhi Software (beijing) Co. Ltd]
' j- I3 `5 a H5 Z. | - <KavStart><"C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KAVStart.exe" -startup> [(Verified)KINGSOFT CORPORATION]+ B) L( x; }. ~: j, r
- <IMJPMIG8.1><; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32> [N/A]' v; G/ d5 Y/ |6 a, M1 _
- <PHIME2002A><; > [N/A]
, n! J6 l. k4 j& H4 [3 `. U - <PHIME2002ASync><; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32> [N/A]
2 \7 H6 Y5 Q w; I0 u' N - [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
7 c" I; X& A1 F2 ~/ x$ B, A' ^ - <shell><Explorer.exe> [(Verified)Microsoft Windows Component Publisher]
; i. u* J# B6 a - <Userinit><C:\WINDOWS\system32\UserInit.exe,> [(Verified)Microsoft Windows Publisher]
+ J! n$ P* c( Q# Y0 A - <UIHost><logonui.exe> [(Verified)Microsoft Windows Publisher]
7 I: ?' E+ b& b. \ T - [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
1 F$ ?" G- X$ v" d) T( L# Y - <{AC2DC2EF-5165-40A3-8CDF-41DCA1B0901A}><C:\WINDOWS\system32\shlhook.dll> [Beijing Rising Technology Co., Ltd.]9 U+ X- e' h& R9 |2 _! W; N
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
5 |0 ~2 ]# q' i C# X. W- u - <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE> [N/A]3 @( A+ L( ]/ e& b* n
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]% o! {* ^- M/ e6 S. c1 V# P; {* C5 g
- <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [N/A]
2 U3 ?; r1 j' J& ^8 m! M5 q( [ - [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]$ r9 x. r* o8 M" H& Z* y1 K# `" f
- <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> [N/A]
8 q% p) x& E+ w5 d/ K# f - [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]' \% P3 C& f. k( Q% O5 B
- <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [N/A]1 I' \( |# I' I" X, _
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
) Y! p9 S* l6 H3 [# i - <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Remove.PerUser.NT> [(Verified)Microsoft Windows Publisher]
7 \! o# r2 K6 z } I - [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
( ~; y# s* o) T1 j$ m2 A7 e7 O - <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser> [(Verified)Microsoft Windows Publisher]5 T6 _! T# y' J+ a
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]+ r ]" F1 M& w) u1 x5 x0 P6 f) X' O4 c
- <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp10.inf,PerUserStub> [(Verified)Microsoft Windows Publisher]0 E! B8 H' Q% T1 @
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
0 L/ m* b" m4 e4 i$ w8 ` - <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [N/A]/ J# a% x" i9 Y J* n" r
- ==================================
8 u! Z2 f/ n2 R. ?7 A8 c3 } - 启动文件夹
4 p% G& x: [. H6 ` @) @) f - N/A
" w/ t S. g' q" M. z Q - ==================================
" S ], ^: n* h - 服务
7 S, \6 A2 w0 v/ Z8 ] - [3ware Controller Service / 3wareSrv][Stopped/Auto Start]3 i6 v' M: U4 r# h) l& W9 Y4 [
- <C:\WINDOWS\System32\3wareSrv.exe><N/A>/ @2 T& C- ?# N- h8 a* L
- [Google Updater Service / gusvc][Stopped/Manual Start]
3 H0 ^& t' C- F; t. l i0 j - <"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"><Google>
2 ~4 @0 A) }+ \" {3 W, m - [Help and Support / helpsvc][Stopped/Disabled]8 W' ?6 O+ M4 i. I
- <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll><N/A>
" w% ?* u% s. {4 i - [Human Interface Device Access / HidServ][Stopped/Boot Start]& j$ X& o# T- A: r1 d1 B% c
- <\SystemRoot\C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
% m- R" _/ k& {1 K9 m; q& B* {7 q1 e - [Kingsoft Internet Security Common Service / KISSvc][Stopped/Auto Start]
, H6 x* R, V# ?# C - <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KISSvc.EXE><Kingsoft Corporation>
/ h5 _# a! c1 f% B C: c - [Kingsoft Personal Firewall Service / KPfwSvc][Running/Auto Start]
3 B) Y: f" {9 r& l, a, X - <"C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KPfwSvc.EXE"><Kingsoft Corporation># [! i' X, Z. K' n. \
- [Kingsoft Antivirus KWatch Service / KWatchSvc][Running/Auto Start]9 | s" [5 u5 I
- <"C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KWatch.EXE"><Kingsoft Corporation>
( S0 A, J6 ?+ t# K/ ~/ {! [4 M9 C+ n - [NetMeeting Remote Desktop Sharing / mnmsrvc][Stopped/Manual Start]% I v( O4 ]' R, I1 o) L
- <><N/A>
' A( g" x% e& ]! p6 L) n( k3 h6 x - [Qvod Terminal / Qvod Terminal][Running/Auto Start]
- T& M6 I% V2 ^6 _! r7 W - <C:\Program Files\QvodPlayer\QvodTerminal.exe><Shenzhen QVOD Technology Co.,Ltd>" k9 k: r$ L: j' {* V
- ==================================
^5 o0 E q1 o. r! v& |" A - 驱动程序4 l, I2 Z( F" B: ?
- [22j / 22jn][Stopped/Boot Start]* J0 s, B/ z" D; w2 s7 F
- <\SystemRoot\System32\DRIVERS\22jn.sys><N/A>9 D9 J5 z5 l" p J0 ^% E" B. U+ B
- [360AntiArp / 360AntiArp][Running/System Start]& a/ q( D8 |" V7 n3 q2 g
- <\??\C:\WINDOWS\system32\drivers\360AntiArp.sys><360安全中心>$ P4 a4 i: C( t1 i% D$ i
- [43ec / 43ecu][Stopped/Boot Start]) f& f& r& Y# d4 b8 r, ~; q2 V; Y
- <\SystemRoot\System32\DRIVERS\43ecu.sys><N/A>
5 U0 F$ S8 W2 |" B6 u - [Intel(r) 82801 Audio Driver Install Service (WDM) / ac97intc][Running/Manual Start]2 L N& X2 i2 [8 ]( K5 d8 x( o0 }' H
- <system32\drivers\ac97intc.sys><Intel Corporation>
+ \9 b% |6 ]; N4 Y8 T) n3 V2 z - [Promise driver accelerator / bb-run][Running/Boot Start]) i B6 A5 x- E A! x2 ]! C l
- <\SystemRoot\system32\DRIVERS\bb-run.sys><Promise Technology, Inc.>
8 A; M: X! \8 ?6 h' ^! P6 _, K; V' X - [Promise Removable Disk Control Driver / dontgo][Running/Boot Start]7 q. Y" T* D I% @, ^
- <\SystemRoot\system32\DRIVERS\DontGo.sys><Promise Technology, Inc.> k! k* I* o o4 K q* G
- [KAVBase / KAVBase][Running/Auto Start], w* c- P8 \* w4 x% j
- <\??\C:\WINDOWS\system32\Drivers\KAVBase.sys><Kingsoft Corporation>
$ M0 l$ k" N- N6 E6 G4 |9 } - [KAVBootC / KAVBootC][Running/Boot Start]8 q3 I! C4 @ s& X% W
- <\SystemRoot\system32\Drivers\KAVBootC.sys><Kingsoft Corporation>
' z$ l& ]1 `+ ^- s; b; a0 D - [KAVSafe / KAVSafe][Running/Auto Start]
% K3 d( h- c/ d - <\??\C:\WINDOWS\system32\Drivers\KAVSafe.sys><Kingsoft Corporation>5 ?6 }2 q, g: Y
- [KNetWch / KNetWch][Running/System Start]8 a$ W$ ?/ m! |. R& |# K, @
- <\??\C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KNetWch.SYS><Kingsoft Corporation>
3 G$ ?: f) S8 f( a6 D - [KWatch3 / KWatch3][Running/Auto Start]
f5 o$ V4 X5 g3 g - <\??\C:\WINDOWS\system32\drivers\KWatch3.SYS><Kingsoft Corporation>6 S7 l0 S0 A- E( _' k
- [ntptdb / ntptdb][Stopped/Auto Start]' T2 ~2 p+ y; X* P/ u4 G! r: V
- <\??\C:\Documents and Settings\All Users\Application Data\Microsoft\Office\SYSTEM\ntptdb.sys><N/A>
9 ?2 q; R. ?6 d8 l8 U - [nv / nv][Running/Manual Start]
6 F+ Z$ O, r! ~/ k8 J- D) i - <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>8 z5 r+ E$ n# u/ {0 W
- [NVIDIA nForce RAID Driver / nvrd32][Running/Boot Start]
% o [- C1 R. e - <\SystemRoot\system32\DRIVERS\nvrd32.sys><NVIDIA Corporation>
/ E q6 |' O8 H5 B- _8 n - [DDK PACKET Protocol / Packet][Running/Manual Start]
9 ^# O+ ^* Z5 u8 S% } - <system32\DRIVERS\ProtoDrv.sys><360安全中心>
4 a2 b& y T/ h8 ^! p" ]: J8 X - [pnduojtwbt / pnduojtwbt][Stopped/Boot Start]
" _ O( m0 p9 i; l% R$ R - <\SystemRoot\system32\drivers\pnduojtwbt.sys><N/A>! I# U3 g. R% r- H: h1 u. l1 s
- [Direct Parallel Link Driver / Ptilink][Running/Manual Start]
; L; A1 t; S3 v; Z/ ]* A - <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
: B. T& u' s1 F, g1 m* E* `+ L8 q - [RsAntiSpyware / RsAntiSpyware][Stopped/Boot Start]2 L! v$ F& ], D$ e9 S
- <\SystemRoot\system32\drivers\RsBoot.sys><N/A>
/ {6 J; ?+ s9 @3 V) l4 R" Q - [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start]
( E7 p& z. H. |" z7 Z6 w - <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
$ O5 Z5 K; `4 x' ]( n! | - [SafeBoxKrnl / SafeBoxKrnl][Running/System Start]. F4 u& y1 ~9 l4 H- y. n' P' B0 R
- <\??\C:\Program Files\360Safebox\SafeBoxKrnl.sys><360安全中心>
6 \, O$ ~* H' u8 \6 k0 z! p0 m - [Secdrv / Secdrv][Stopped/Manual Start]
6 u4 r1 m2 {4 I4 M9 u - <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>9 Y9 H+ u5 w) `& D; R! y2 C3 X+ L$ f
- [SATALink External Device Filter / SiRemFil][Running/Boot Start]5 o! f; s7 L+ B
- <\SystemRoot\system32\DRIVERS\SiRemFil.sys><Silicon Image, Inc.>
, G; n4 I* \' ^% t! F8 e - [System Restore Filter Driver / sr][Stopped/Disabled]+ t5 i7 \8 @# m6 ^
- <system32\DRIVERS\sr.sys><N/A>
) _" F5 ]. n% t9 r; b2 t4 F - [TesSafe / TesSafe][Stopped/Manual Start]9 j, I% ~) B1 n2 a/ t9 e2 N
- <\??\C:\WINDOWS\system32\TesSafe.sys><TENCENT>
8 U. X4 K! c/ J6 z3 l1 a - [System Services / unzxzsrs][Stopped/Boot Start]2 w+ C+ h5 G4 ^! b: u! y
- <\SystemRoot\system32\drivers\unzxzsrs.sys><N/A>
* B/ s8 G2 F0 M3 N9 Z2 r - [ViBus / ViBus][Stopped/Boot Start]
& n8 F, @! D4 b+ Y4 B4 R - <\SystemRoot\system32\DRIVERS\ViBus.sys><N/A>
2 O% r; }% N8 A/ z6 Y - [World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start]
- M: U: p+ m, z* | f ^ - <system32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>+ X: n C: a, w% N8 r5 W
- [VIA SATA IDE Hot-plug Driver / xfilt][Running/Boot Start]1 \9 X6 z# C- p n" ?
- <\SystemRoot\system32\DRIVERS\xfilt.sys><VIA Technologies,Inc>
! S0 ?" g6 j; C/ [7 ]3 D - [ATI Extend / zhibmaso][Stopped/Boot Start]
- A- i. m u$ W, s3 L& L - <\SystemRoot\system32\drivers\zhibmaso.sys><N/A>
$ ]9 h1 d6 g3 t' }6 `* t2 W# G - [Vimicro USB PC Camera (ZC0301PL) / ZSMC301b][Running/Manual Start]; w( ]. z: u* j3 w6 u
- <System32\Drivers\usbVM31b.sys><Vimicro Corporation>& M+ J* y, k- `1 o. L
- ==================================
4 M1 C, a, A& k# b1 A' V+ | - 浏览器加载项
9 s7 p6 u& W* q) b; s( U - [Google Toolbar Helper]
, A1 R" g0 ^3 X# O+ g - {AA58ED58-01DD-4d91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, Google Inc.>. b I( x3 Q+ [: H
- [Google Toolbar Notifier BHO]: U9 A$ M- e ~9 ~) f) \
- {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll, Google Inc.>6 V9 W' \; J, n {
- [SafeMon Class]& E3 `2 l# j) V5 j, v
- {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, 360.CN>
# x/ O( |' C: O! W - [kingsoft browser shield]) i: N$ F+ ~9 s4 ]6 ~
- {D963BE1A-6B35-47DB-B002-49FAE71D85CC} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KASBrowserShield.DLL, Kingsoft Corporation>& ?5 n1 X8 F; O+ a
- [IEBuddyExtControl Class]
8 H+ a. V/ W' a& W+ @ - {3AECD3C1-7085-4731-96DC-47B6CF7EF749} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddyExt.DLL, Kingsoft Corporation>3 |* U3 X% G3 _+ ~! z, I
- [Zcom 杂志]$ @8 I! W9 j5 j+ i/ m: n# c$ H
- {4045D313-1D5E-4fe4-93A0-A34630B6A00B} <C:\Zcom\E-Space.exe, N/A> [* w7 q% p1 v* I) X) M; \
- [&Google]) w F' Q. w& z) @
- {2318C2B1-4965-11d4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, Google Inc.>0 A: |$ u+ K4 Q
- [KooPlayer Control]7 t7 C6 b! j7 R( C
- {C728DAB8-FDF5-4CD7-89DD-879D25794C77} <C:\WINDOWS\system32\CCTVKO~1.OCX, Koos>$ y: V' \8 ~2 V! j; d3 C
- [Shockwave Flash Object]/ w3 H% m: T7 J. r+ e# a
- {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx, Adobe Systems, Inc.>
0 {7 W; j# q! a+ {/ R# ? - [KUpdateObj2 Class]0 `3 B; O% V; I6 d
- {D82303B7-A754-4DCB-8AFC-8CF99435AACE} <C:\WINDOWS\system32\KingSoft\KOS\UpdateOcx2.dll, Kingsoft Corporation>
1 e: @; ~( O- I B ?: w - [Google Script Object]
, t' Q6 Q! i( f - {00EF2092-6AC5-47C0-BD25-CF2D5D657FEB} <c:\program files\google\googletoolbar2.dll, Google Inc.>2 h- ^$ c0 N, i
- [EWA Control]/ p; S, u9 ?- C0 a* T0 n
- {18226BF8-DC0B-4D81-80E9-A41AE37BB73A} <C:\PROGRA~1\PPLive\SYNACA~2.OCX, Synacast>
$ ~# u9 _$ l3 v/ R- h) Z - [Windows Media Player]- Y7 y$ D) p( P; t+ x
- {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\msdxm.ocx, Microsoft Corporation>
! j' p. P; j% B: p" K - [&Google]$ T8 V! ?$ z& [
- {2318C2B1-4965-11D4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, Google Inc.># w L2 w: z, Y; l+ b
- [HTML Document]
- b& I! n2 m$ K. @: Q - {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
& ?1 Y1 C# y" K" B) R - [DHTML Edit Control Safe for Scripting for IE5]- E0 `/ X9 v* D
- {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, Microsoft Corporation>7 @, `! N: L0 k, e, n
- [RealPlayer RAM Download Handler]
& p0 p3 U) V$ l% N3 }0 [) \, N+ } - {2F542A2E-EDC9-4BF7-8CB1-87C9919F7F93} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
$ E$ R7 { ~! h o) N - [IEBuddyExtControl Class]
. ^/ w' ^( l/ Z) x3 N - {3AECD3C1-7085-4731-96DC-47B6CF7EF749} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddyExt.DLL, Kingsoft Corporation>
# S1 J! Z9 ]' ]% n8 j: Q/ N8 _( C, @( { - [XML Document]. Q1 x6 R! P, {7 M& }7 q
- {48123BC4-99D9-11D1-A6B3-00C04FD91555} <C:\WINDOWS\system32\msxml3.dll, Microsoft Corporation>" |2 `+ G+ ]% W, V
- [HHCtrl Object]
2 i) y- ^7 D7 f. |% r0 i - {52A2AAAE-085D-4187-97EA-8C30DB990436} <C:\WINDOWS\system32\hhctrl.ocx, Microsoft Corporation>
2 n' D, T% g3 |& X; P. ~7 j# j! ?! ~ - [Windows Media Player]# D4 ~6 X* E9 o; U; O
- {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
9 j/ h+ R- ^) c - [Active Desktop Mover]; r l' t, S# u3 l1 d, w
- {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A>9 O* ~& v' G! ~1 S) s# z1 A
- [360SafeLive]
6 ^- Z9 Z8 I+ b0 z4 g' k2 x9 W+ ^ - {87515F61-A66C-4319-A0E0-D416CB8059E3} <C:\Program Files\360safe\live.dll, 360.cn>
% O" V. n1 `/ n% Z - [Microsoft Web 浏览器]) g; c' H/ z C. D
- {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>: Z* P* Y; R* w- C5 B/ e' ^
- [Browser Enhanced Objects]
" a4 Q% _) p$ d: s; j! S - {986488AF-13D5-9DDF-4FEF-9FB88698CFC1} <C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\USERDATA\webbrowser_2011.dll, N/A>( w5 | X) }5 m% N
- [Google Toolbar Helper]
' \: Y+ g* D% Q4 s2 P+ P7 v - {AA58ED58-01DD-4D91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, Google Inc.>$ g- q/ M8 M& R* {
- [Microsoft Scriptlet Component]
& N- @* _ ~0 U/ U6 V - {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation>
& n: s5 U) l3 ` - [Google Toolbar Notifier BHO]
: {8 ?: O8 D2 m8 z. h1 J: Z$ V - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll, Google Inc.>* j: K; L9 C# S5 T% {+ F
- [SearchAssistantOC]3 C L1 m$ u/ Q4 I0 Z4 u4 T
- {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
7 Z; l% h# D. @) _! E - [SafeMon Class]3 L9 n1 O4 e3 ^2 T& t- J
- {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, 360.CN>
# m/ S9 v/ m/ |2 H - [RDS.DataSpace]% b1 x! M# d& r
- {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>* o' D& q% R( t
- [KooPlayer Control]
0 T* L" J: x' v0 I, Q+ {; v$ t - {C728DAB8-FDF5-4CD7-89DD-879D25794C77} <C:\WINDOWS\system32\CCTVKO~1.OCX, Koos>
8 t5 q0 {4 W* a: m - [AUDIO__MID Moniker Class]
' L9 Q8 s7 M1 k9 W - {CD3AFA74-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
; Z8 K9 S3 P1 T, E - [AUDIO__MP3 Moniker Class]
, W9 p. [- ~& X3 }, m - {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
4 F/ E3 p5 f0 D% C - [AUDIO__X_MS_WMA Moniker Class]2 e7 a+ n. k" b
- {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
/ D' O6 [" W6 }8 p - [VIDEO__X_MS_WMV Moniker Class]
7 g9 I8 C1 i* o - {CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
6 }! w7 x2 Q ?; H. ] h7 a! l - [RealPlayer G2 Control]
4 M" c+ `2 x) B5 s/ y4 H - {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
0 B2 g" v% Y& ?# G1 j9 U. h& u; B/ [ - [Shockwave Flash Object]: O, p, ~7 B7 p! n
- {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx, Adobe Systems, Inc.>
& v( @ E+ R* G/ o$ [ - [KUpdateObj2 Class]2 U6 V/ h# O2 p* y
- {D82303B7-A754-4DCB-8AFC-8CF99435AACE} <C:\WINDOWS\system32\KingSoft\KOS\UpdateOcx2.dll, Kingsoft Corporation>- h1 U0 ~ _# m& E1 D
- [kingsoft browser shield], U+ c9 q4 [7 C+ q, I9 y) v
- {D963BE1A-6B35-47DB-B002-49FAE71D85CC} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KASBrowserShield.DLL, Kingsoft Corporation>
" x$ Z# L* j% d& r0 X - [PasswordEditCtrl Class]$ d f8 `0 G0 D$ G
- {E787FD25-8D7C-4693-AE67-9406BC6E22DF} <C:\WINDOWS\system32\qqedit\qqedit.dll, 腾讯科技(深圳)有限公司>% s- j7 k: I2 o9 G1 A
- [QvodCtrl Class]
9 p. i" ]5 X7 P3 l$ j, h - {F3D0D36F-23F8-4682-A195-74C92B03D4AF} <C:\Program Files\QvodPlayer\QvodInsert.dll, Shenzhen QVOD Technology Co.,Ltd>$ h2 u- ~* M, v1 p% @/ p1 C' ^4 k0 Y8 D
- [&使用超级旋风下载]2 I3 r; m) t8 Q4 I; z0 _2 C' L8 |
- <C:\Program Files\Tencent\QQDownload\geturl.htm, N/A>! f; j3 h- I* k; o8 g
- [&使用超级旋风下载全部链接]
" \3 U, k* t: [% `& |- {+ O$ f% ] - <C:\Program Files\Tencent\QQDownload\getAllurl.htm, N/A>) D4 Y& O: f6 D1 C! M D
- [使用迅雷下载]
) u3 g6 u* k9 m0 o# u O# U0 P' W1 o - <, N/A>8 a& |% |2 u* ^2 c
- [使用迅雷下载全部链接]
. s; O8 }0 H$ Z) u8 N/ H9 `0 K4 [/ c - <, N/A>
7 i9 w8 c1 D' z6 s. g; V - [导出到 Microsoft Office Excel(&X)]
4 j( V: | k$ @3 O - <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
& C3 ^6 k8 R+ J( K) | - [添加到QQ表情]
9 v. C1 p; a# W! V+ ? - <C:\Program Files\Tencent\QQ\AddEmotion.htm, N/A>. e% b# _7 t% M6 r
- ==================================
# D5 s: b5 v, U0 J' B - 正在运行的进程3 S: s- m3 w: H. Y
- [PID: 444 / SYSTEM][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]0 h: F2 b* R; s1 Y
- [PID: 496 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
3 c6 U: }* H; B$ w6 X. F6 r - [PID: 520 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
- [# }) b+ B& u9 {, y# Q - [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
* U0 s: h( q/ M2 q' p - [PID: 564 / SYSTEM][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)], C: i2 m+ \& N7 b! z4 J
- [PID: 576 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]; \. g* b$ e' D/ S" o
- [PID: 720 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
& I; G' S! v0 |& S$ t; Q& c. B0 [8 S - [PID: 780 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
) E8 _6 a. a6 Z! W& Y0 o - [PID: 856 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
2 n' c4 U3 \- m6 j - [PID: 944 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]! d: |, e, m% ^3 [3 A
- [PID: 1012 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]+ s/ N9 c. w0 A- A
- [PID: 1236 / Administrator][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_qfe.070613-1311)]: p. Q: m1 O* v+ G, d# r
- [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL] [Kingsoft Corporation, 2008,04,02,5]& j! ?3 _, C% n: k& F
- [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll] [Kingsoft Corporation, 2008,04,22,364]8 u( ?3 l, b* i8 f3 ]" R
- [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
, P) W7 t5 q8 [; W6 K! E* [: [ - [C:\Program Files\360safe\safemon\safemon.dll] [360.CN, 4, 1, 5, 1001]
' ?7 h- h( C1 V- d2 J7 j2 V - [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KAVEXT.DLL] [Kingsoft Corporation, 2008,05,07,373]
/ z4 }- Z7 n7 K# D, [ - [C:\Program Files\Tencent\QQ\qdshm.dll] [, 1, 0, 101, 20]
# B8 K K3 k1 D1 H- T/ D - [C:\Program Files\Tencent\QQ\MFC42.DLL] [Microsoft Corporation, 6.00.8665.0]
3 W/ e* M% ^0 c$ q7 ?. k - [C:\Program Files\WinRAR\rarext.dll] [N/A, ]( ^8 F/ H( A- j6 S/ ]
- [C:\WINDOWS\system32\shlhook.dll] [Beijing Rising Technology Co., Ltd., 4.0.0.9]
3 \! j9 x6 S4 @1 T2 ^ - [C:\Program Files\Tencent\QQ\DShared.dll] [Tencent, 2, 1, 0, 0]3 n/ v/ S( P0 w+ _% E& r$ j' Y
- [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll] [Microsoft Corporation, 11.0.5510]0 v; l. Y% m& `% K" z- n
- [PID: 1332 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
# y2 u q5 f/ j5 N/ _5 O' p* F - [C:\WINDOWS\system32\mdimon.dll] [Microsoft Corporation, 11.3.8166.2]# A0 h& S) l. P, K# M
- [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll] [Microsoft Corporation, 11.3.8166.2]5 ~- J$ ]/ _# H" Z7 r3 D
- [PID: 1540 / Administrator][C:\Program Files\360safe\AntiArp\AntiArp.exe] [360安全中心, 2, 0, 0, 1008]+ O# s5 O, n* d* I$ t8 X$ h
- [C:\Program Files\360safe\safemon\safemon.dll] [360.CN, 4, 1, 5, 1001]0 G) Z$ l+ Z, ^4 |" K& O6 k
- [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL] [Kingsoft Corporation, 2008,04,02,5]
) a3 s) M* Z% h5 C' ~7 Z1 r - [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll] [Kingsoft Corporation, 2008,04,22,364]
b9 ~+ I/ B6 c4 w - [C:\Program Files\Tencent\QQ\DShared.dll] [Tencent, 2, 1, 0, 0]
3 R7 S8 {7 n6 x0 X ~: n - [PID: 1560 / Administrator][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
9 D% Z* \7 v, D - [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL] [Kingsoft Corporation, 2008,04,02,5]/ C# U( y) c. u
- [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll] [Kingsoft Corporation, 2008,04,22,364]
4 o+ n3 p+ ~7 s - [C:\Program Files\Tencent\QQ\DShared.dll] [Tencent, 2, 1, 0, 0]
! V# j5 m- X! | - [PID: 1576 / Administrator][C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe] [Google Inc., 2, 0, 301, 1654]
3 b# C q5 A& a" r - [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\gtn.dll] [Google Inc., 2, 0, 301, 7164]
C3 W3 @/ d' _0 Y( E - [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL] [Kingsoft Corporation, 2008,04,02,5]4 O- W* ?. q/ D; |3 K7 s7 f5 N
- [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll] [Kingsoft Corporation, 2008,04,22,364]
1 u3 K& @9 I2 J$ D1 j6 d - [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\res_zh-CN.dll] [Google Inc., 2, 0, 301, 7164]
7 G+ l4 {3 |4 M& I& q5 i' s! g - [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll] [Google Inc., 2, 0, 301, 7164]6 z5 x( p. s6 r$ B3 H0 A5 ?
- [C:\Program Files\360safe\safemon\safemon.dll] [360.CN, 4, 1, 5, 1001]
* M6 |$ w) K& d% L/ o1 U2 E - [C:\Program Files\Tencent\QQ\DShared.dll] [Tencent, 2, 1, 0, 0]
- l$ |, s# w: Z: @' d8 B( d' a! F/ Z - [PID: 1648 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]6 S" Y: D4 B" O; l' o3 G: H
- [PID: 1744 / SYSTEM][C:\Program Files\QvodPlayer\QvodTerminal.exe] [Shenzhen QVOD Technology Co.,Ltd, 2, 5, 0, 53]
: i) @1 v$ k6 d7 v% f# M5 Z - [PID: 1860 / SYSTEM][C:\WINDOWS\system32\skeys.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
. w* H# N6 `* f: L' N- z3 _+ a - [PID: 1908 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
5 O& B% C+ c6 w" f2 }5 I+ j - [PID: 1964 / LOCAL SERVICE][C:\WINDOWS\system32\wdfmgr.exe] [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]" M9 V" f/ x% [
- [PID: 2772 / Administrator][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]' t) N5 Y4 E; E e9 K, C2 O4 `
- [C:\Program Files\360safe\safemon\safemon.dll] [360.CN, 4, 1, 5, 1001]1 k+ O( s4 W/ t8 i/ I0 k& q
- [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL] [Kingsoft Corporation, 2008,04,02,5]
5 n) a9 \/ |. S - [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll] [Kingsoft Corporation, 2008,04,22,364]
1 V B4 P; m; y0 `( C1 D0 B& ~$ X - [c:\program files\google\googletoolbar2.dll] [Google Inc., 4, 0, 1606, 6690]
# Z6 @) d6 |9 ?- n - [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll] [Google Inc., 2, 0, 301, 7164]& t* b. T8 q6 v& u0 D' l9 i
- [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KASBrowserShield.DLL] [Kingsoft Corporation, 2008,04,15,2]
* f- y" f- A2 h. A - [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddy.dll] [Kingsoft Corporation, 2008,04,15,2]
9 O5 P$ j. O6 I' R" R6 ~ - [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddyExt.DLL] [Kingsoft Corporation, 2008,05,14,83]; _+ `. `3 S3 u
- [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KANTray.dll] [Kingsoft Corporation, 2008,04,15,2]
7 D; d3 q! \, |" Y# `3 [ - [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KAVAFish.DLL] [Kingsoft Corporation, 2008,05,13,78]
/ {2 q' y: R% P1 e; j5 g - [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll] [Microsoft Corporation, 11.0.5510]
9 y% e" a$ [8 l7 d ` - [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
d0 Q) Q, D" r2 K - [C:\WINDOWS\system32\WN.IME] [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
5 h$ F: O+ K$ r# h0 P, H; a - [C:\Program Files\ShiQiang\wnime\Dll32\wnpy_StatusWnd.dll] [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]% q) h) Y) y( \; C
- [C:\Program Files\ShiQiang\wnime\Dll32\wnpy_CompWnd.dll] [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]# _! K1 T$ H p' D, X$ i w4 j+ W; p
- [C:\Program Files\ShiQiang\wnime\Dll32\wnpy_Query.dll] [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
. l% C) ]. b! \% ?. ^ - [C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 3.2.0.0]
* P; X6 d) v; ?7 h - [C:\Documents and Settings\Administrator\My Documents\SogouInput\Plugin\SgImeWord.dll] [Sogou.com Inc., 3.2.0.0]
; G! D A1 _2 Z W - [C:\WINDOWS\system32\WINWB98.IME] [Microsoft Corporation, 4.00.950], ?% f6 }' q' o! P2 H5 A* V
- [C:\WINDOWS\system32\WINWB86.IME] [Microsoft Corporation, 4.00.950]5 K) s6 \3 {. D' K8 s# e
- [C:\Program Files\Tencent\QQ\DShared.dll] [Tencent, 2, 1, 0, 0]
( s6 i* ~0 {3 S. \$ j5 \' p - [PID: 1124 / Administrator][C:\Program Files\Tencent\QQ\TXPlatform.exe] [Tencent, 1, 0, 170, 0]. V1 o# e/ j [; G8 {' p' f
- [C:\Program Files\360safe\safemon\safemon.dll] [360.CN, 4, 1, 5, 1001]
5 l. T" K% e0 M- O: | - [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL] [Kingsoft Corporation, 2008,04,02,5]* x, Q/ L+ i0 H7 t% q
- [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll] [Kingsoft Corporation, 2008,04,22,364]
2 Z' |1 T' D$ Q - [C:\Program Files\Tencent\QQ\DShared.dll] [Tencent, 2, 1, 0, 0]/ N8 d8 m& ?! k+ ?" h/ Q* G9 M
- [PID: 928 / Administrator][F:\arvmon.exe] [任软工作室, 2.2.5.201]1 t1 ?( g E2 v# }
- [C:\Program Files\360safe\safemon\safemon.dll] [360.CN, 4, 1, 5, 1001]
8 d i3 h0 M3 W! @( `8 r% o - [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL] [Kingsoft Corporation, 2008,04,02,5]; Y- U i. \7 v: d' U* p4 l" h. c
- [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll] [Kingsoft Corporation, 2008,04,22,364]
) ]+ t) t& i, u6 } - [C:\Program Files\Tencent\QQ\DShared.dll] [Tencent, 2, 1, 0, 0]# T0 M2 D1 T+ k, R* M" X) Z
- [F:\Vdata.dll] [任软工作室, 2, 2, 1, 94]
6 O) O% v7 s$ A/ S4 w - [PID: 2540 / Administrator][F:\AutoGuarder.exe] [任软工作室, 2.2.5.201]1 H+ Q& S9 F" O7 V$ `
- [C:\Program Files\360safe\safemon\safemon.dll] [360.CN, 4, 1, 5, 1001]; Y! M1 S! Q$ i- I9 ^/ q& v
- [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL] [Kingsoft Corporation, 2008,04,02,5]
7 |& \8 B7 s; |0 V* [. ? - [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll] [Kingsoft Corporation, 2008,04,22,364]
! F% G* b' ^, b/ u4 R" Q - [C:\Program Files\Tencent\QQ\DShared.dll] [Tencent, 2, 1, 0, 0]9 q3 ?) ]" V* p* ? T! z; |1 G% U
- [PID: 2476 / Administrator][d:\我的文档\桌面\系统检测修复\SREngPS.EXE] [Smallfrogs Studio, 2.5.16.900]; {9 B$ c# C7 |
- [C:\Program Files\360safe\safemon\safemon.dll] [360.CN, 4, 1, 5, 1001]
8 e+ _, T9 T G% S5 @3 e, L - [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL] [Kingsoft Corporation, 2008,04,02,5]! e& o7 H) |! A5 {7 c. Y
- [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll] [Kingsoft Corporation, 2008,04,22,364]
( |: `: a/ b3 g$ H" C1 ] - [C:\Program Files\Tencent\QQ\DShared.dll] [Tencent, 2, 1, 0, 0], h$ h0 z( `5 K+ B/ O: U
- [d:\我的文档\桌面\系统检测修复\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15]
* D5 j4 k! h1 J5 M5 K - ==================================
' E1 u, n7 i9 l6 k& r0 z# @ - 文件关联" C1 u" S! u) n
- .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
& I5 J, S; p% B6 ? - .EXE OK. ["%1" %*]
# |4 a' p. [, T- |( }" c" p - .COM OK. ["%1" %*]
) q7 E+ A( V$ K+ V# b1 r3 P% A9 b7 ` - .PIF OK. ["%1" %*]: O! _" o6 [1 h6 o8 M
- .REG OK. [regedit.exe "%1"]
9 D+ A2 Y" c+ R/ q - .BAT OK. ["%1" %*]
0 C9 W, ~/ s' V4 I# _) { - .SCR OK. ["%1" /S]
$ ?$ P/ t: G4 Y - .CHM OK. ["C:\WINDOWS\hh.exe" %1]6 S6 C4 ]" v: T a$ Z3 b+ ^
- .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]$ a; s, v8 s: R
- .INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
, m. D5 i. G! k - .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]& O* E6 ?: p3 h6 j0 [. [0 J7 u% r; A
- .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*], P$ q: f8 I8 ]* n* u! `' R( H
- .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]- q9 R* F m9 T6 p, I3 M, B; y* `5 Y
- .LNK OK. [{00021401-0000-0000-C000-000000000046}]
3 L1 E2 z$ }& ~" V7 ~ - ==================================
6 G5 E' Z# w8 V! d. X2 A& g, } - Winsock 提供者
) d) L0 l3 Z3 T' r3 A; W+ Q - N/A$ ^( R$ n9 ?# Z% ~7 x
- ==================================
/ e: o: e6 c0 R: M - Autorun.inf
6 ~/ w1 Z( e3 M* m, ~: I - N/A
& `# {- n6 f9 k7 }; c* q - ==================================
) k, m Z- ~; w3 _8 r$ ?' v- V - HOSTS 文件8 H6 a% b8 }; m+ ~
- N/A: b& p' J7 j' T% I) U
- ==================================8 M; O* G6 q) x; y0 F
- 进程特权扫描' T% Y7 q" j5 I
- 特殊特权被允许: SeLoadDriverPrivilege [PID = 520, C:\WINDOWS\SYSTEM32\WINLOGON.EXE]
6 y* `) M) n: m/ F; z - 特殊特权被允许: SeDebugPrivilege [PID = 928, F:\ARVMON.EXE]; w- E! _$ L9 a6 K
- 特殊特权被允许: SeLoadDriverPrivilege [PID = 928, F:\ARVMON.EXE]
2 L# m5 p( n6 v - 特殊特权被允许: SeDebugPrivilege [PID = 2540, F:\AUTOGUARDER.EXE]- \* ^; ~; Z' v1 f
- 特殊特权被允许: SeLoadDriverPrivilege [PID = 2540, F:\AUTOGUARDER.EXE]
# s. X2 o* }. [: O9 N - ==================================
" L c) W6 I) a# d3 e9 o; E+ R - API HOOK u J# s. l2 ^# a( F0 f
- N/A0 _3 R5 k0 g* h+ c" W
- ==================================+ {7 b) p4 n+ @
- 隐藏进程
' i& d2 H% F# W/ U1 p - N/A$ h$ o1 L! f# M) B J& N1 v
- ==================================( e. W R& q* \; m! J6 Z8 q
4 S2 C6 w3 }' j$ R
复制代码 |
|