PAti - 2007-6-20 21:11:00
[CODE]
2007-06-20,20:55:20
System Repair Engineer 2.3.13.690
Smallfrogs (http://www.KZTechs.com)
Windows XP Home Edition Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能
以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> [N/A]
<run><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<CM-SmWizard><C:\WINDOWS\System\SmWizard.exe> [(Verified)C-Media Electronics Inc.]
<RfwMain><"C:\Program Files\rising\Rfw\rfwmain.exe" -Startup> [Beijing Rising Technology Co., Ltd.]
<RavTask><"C:\Program Files\rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.]
<SoundMan><SOUNDMAN.EXE> [(Verified)Realtek Semiconductor Corp.]
<Cmaudio><RunDll32 cmicnfg.cpl,CMICtrlWnd> [N/A]
<!AVG Anti-Spyware><"C:\Documents and Settings\Owner\桌面\新建文件夹 (2)\AVG\AVG Anti-Spyware 7.5\avgas.exe" /minimized> [Anti-Malware Development a.s.]
<桌面图标文字自动透><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Corporation]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [(Verified)Microsoft Corporation]
==================================
启动文件夹
[星空极速]
<C:\Documents and Settings\All Users\「开始」菜单\程序\启动\星空极速.lnk --> C:\PROGRA~1\ChinaNet\VNETCL~1.EXE []><N>
==================================
服务
[Application Management / AppMgmt][Stopped/Manual Start]
<C:\windows\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\appmgmts.dll><N/A>
[AVG Anti-Spyware Guard / AVG Anti-Spyware Guard][Running/Auto Start]
<C:\Documents and Settings\Owner\桌面\新建文件夹 (2)\AVG\AVG Anti-Spyware 7.5\guard.exe><Anti-Malware Development a.s.>
[Human Interface Device Access / HidServ][Stopped/Disabled]
<C:\windows\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[Policyagents / IPSEC Service][Running/Auto Start]
<C:\windows\system32\compmgmt.exe><N/A>
[kusn33sd / kusn33sd][Stopped/Auto Start]
<C:\windows\system32\kusn33sd.exe -j><Microsoft Corporation>
[Rising Proxy Service / RfwProxySrv][Stopped/Manual Start]
<c:\program files\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.>
[Rising Personal Firewall Service / RfwService][Running/Auto Start]
<c:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.>
[Remote Packet Capture Protocol v.0 (experimental) / rpcapd][Stopped/Manual Start]
<"C:\Program Files\WinPcap\rpcapd.exe" -d -f "C:\Program Files\WinPcap\rpcapd.ini"><NetGroup - Politecnico di Torino>
[Rising Process Communication Center / RsCCenter][Running/Auto Start]
<"C:\Program Files\rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[Rising RealTime Monitor / RsRavMon][Running/Auto Start]
<"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
==================================
驱动程序
[acpidisk / acpidisk][Running/Auto Start]
<\??\C:\windows\system32\drivers\acpidisk.sys><N/A>
[Service for Realtek AC97 Audio (WDM) / ALCXWDM][Stopped/Manual Start]
<system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
[AVG Anti-Spyware Clean Driver / AvgAsCln][Running/System Start]
<System32\DRIVERS\AvgAsCln.sys><GRISOFT, s.r.o.>
[Rising TDI Base Driver / BaseTDI][Running/Auto Start]
<System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.>
[basic2 / basic2][Stopped/Manual Start]
<System32\DRIVERS\HSF_BSC2.sys><Conexant>
[BM Win32 Network Adapter / bmnadapter][Running/Manual Start]
<system32\DRIVERS\bmnet.sys><The OpenVPN Project>
[Cdsys / Cdsys][Stopped/Manual Start]
<\??\C:\WINDOWS\system32\cdcd.sys><N/A>
[C-Media WDM Audio Interface / cmuda][Running/Manual Start]
<system32\drivers\cmuda.sys><C-Media Inc>
[dhebbjbj / dhebbjbj][Stopped/System Start]
<\??\C:\WINDOWS\system32\drivers\dhebbjbj.sys><N/A>
[EagleNT / EagleNT][Stopped/Manual Start]
<\??\C:\windows\system32\drivers\EagleNT.sys><N/A>
[ExpScaner / ExpScaner][Running/Auto Start]
<\??\C:\Program Files\rising\Rav\ExpScan.sys><>
[Fallback / Fallback][Running/Auto Start]
<System32\DRIVERS\HSF_FALL.sys><Conexant>
[Fsks / Fsks][Running/Auto Start]
<System32\DRIVERS\HSF_FSKS.sys><Conexant>
[haeegcbb / haeegcbb][Stopped/System Start]
<\??\C:\WINDOWS\system32\drivers\haeegcbb.sys><N/A>
[HookCont / HookCont][Running/Auto Start]
<\??\C:\Program Files\rising\Rav\HOOKCONT.sys><Rising>
[HookReg / HookReg][Running/Auto Start]
<\??\C:\Program Files\rising\Rav\HookReg.sys><>
[HookSys / HookSys][Running/Auto Start]
<\??\C:\Program Files\rising\Rav\HookSys.sys><Rising>
[HookUrl / HookUrl][Running/Auto Start]
<\??\C:\Program Files\rising\Rfw\HookUrl.sys><Beijing Rising Technology Co., Ltd.>
[HSFHWBS2 / HSFHWBS2][Running/Manual Start]
<System32\DRIVERS\HSFHWBS2.sys><Conexant Systems, Inc.>
[HSF_DP / HSF_DP][Running/Manual Start]
<System32\DRIVERS\HSF_DP.sys><Conexant Systems, Inc.>
[hsf_msft / hsf_msft][Stopped/Manual Start]
<System32\DRIVERS\HSF_MSFT.sys><Conexant>
[ialm / ialm][Running/Manual Start]
<System32\DRIVERS\ialmnt5.sys><Intel Corporation>
[K56 / K56][Running/Auto Start]
<System32\DRIVERS\HSF_K56K.sys><Conexant>
[mdmxsdk / mdmxsdk][Running/Auto Start]
<System32\DRIVERS\mdmxsdk.sys><Conexant>
[MEMSCAN / MEMSCAN][Running/Auto Start]
<\??\C:\Program Files\rising\Rav\MEMSCAN.sys><瑞星软件有限公司>
[mProcRs / mProcRs][Running/Auto Start]
<\??\c:\program files\rising\rfw\mProcRs.sys><Beijing Rising Technology Co., Ltd.>
[New0 / New0][Stopped/Auto Start]
<\??\C:\WINDOWS\System32\new.sys><N/A>
[Netgroup Packet Filter / NPF][Stopped/Manual Start]
<system32\drivers\npf.sys><Politecnico di Torino>
[npkcrypt / npkcrypt][Running/Auto Start]
<\??\E:\QQ珊瑚\新建文件夹\npkcrypt.sys><INCA Internet Co., Ltd.>
[npkycryp / npkycryp][Stopped/Manual Start]
<\??\E:\QQ珊瑚\新建文件夹\npkycryp.sys><N/A>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
<System32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[QuakeDRV / QuakeDRV][Running/Boot Start]
<\SystemRoot\system32\DRIVERS\quakedrv.sys><N/A>
[rfsafe / rfsafe][Stopped/Boot Start]
<\SystemRoot\system32\drivers\rfsafe.sys><N/A>
[Rksample / Rksample][Stopped/Manual Start]
<System32\DRIVERS\HSF_SAMP.sys><Conexant>
[Feitian ROCKEY4 Device Service / ROCKEYNT][Running/Manual Start]
<system32\DRIVERS\Rockey4.sys><Feitian Technologies Co., Ltd.>
[RsFwDrv / RsFwDrv][Running/Auto Start]
<\??\C:\Program Files\rising\Rfw\RsFwDrv.sys><Beijing Rising Technology Co., Ltd.>
[RsNTGDI / RsNTGDI][Running/Boot Start]
<\SystemRoot\system32\Drivers\RsNTGdi.sys><Beijing Rising Technology Co., Ltd.>
[RSPPSYS / RSPPSYS][Running/Auto Start]
<\??\C:\Program Files\rising\Rav\RSPPSYS.sys><Rising>
[Realtek 10/100/1000 NIC Family all in one NDIS XP Driver / RTL8023xp][Running/Manual Start]
<system32\DRIVERS\Rtlnicxp.sys><Realtek Semiconductor Corporation>
[Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Stopped/Manual Start]
<System32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
[SoftFax / SoftFax][Running/Auto Start]
<System32\DRIVERS\HSF_FAXX.sys><Conexant>
[StreamDispatcher / StreamDispatcher][Running/Auto Start]
<System32\DRIVERS\strmdisp.sys><Conexant Systems>
[TCP/IP Protocol Driver / Tcpip][Running/System Start]
<System32\DRIVERS\tcpip.sys><Microsoft Corporation>
[Tones / Tones][Running/Auto Start]
<System32\DRIVERS\HSF_TONE.sys><Conexant>
[V124 / V124][Running/Auto Start]
<System32\DRIVERS\HSF_V124.sys><Conexant>
[VCD VNC Virtual Network Adapter / vcddev][Running/Manual Start]
<system32\DRIVERS\vcdvnic.sys><VNN B.J.>
[winachsf / winachsf][Running/Manual Start]
<System32\DRIVERS\HSF_CNXT.sys><Conexant Systems, Inc.>
[WmNdisDrv / WmNdisDrv][Stopped/Manual Start]
<System32\Drivers\WmNdisDrv.sys><N/A>
[XScanPF / XScanPF][Stopped/Manual Start]
<\??\F:\极度危险\X-Scan-v3.3\dat\xpf.sys><N/A>
[yjqauc69 / yjqauc69][Stopped/Boot Start]
<\SystemRoot\System32\DRIVERS\yjqauc69.sys><N/A>
[Intel(R) Graphics Platform (SoftBIOS) Driver / {6080A529-897E-4629-A488-ABA0C29B635E}][Stopped/System Start]
<system32\drivers\ialmsbw.sys><Intel Corporation>
[Intel(R) Graphics Chipset (KCH) Driver / {D31A0762-0CEB-444e-ACFF-B049A1F6FE91}][Stopped/Manual Start]
<system32\drivers\ialmkchw.sys><Intel Corporation>
PAti - 2007-6-20 21:14:00
正在运行的进程
[PID: 788][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 856][\??\C:\windows\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 880][\??\C:\windows\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\windows\system32\winlib1.dll] [N/A, N/A]
[PID: 924][C:\windows\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 936][C:\windows\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1088][C:\windows\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1152][C:\windows\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1284][C:\windows\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1344][C:\windows\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1508][C:\windows\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1816][C:\windows\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll] [Adobe Systems, Inc., 7.0.0.0]
[C:\WINDOWS\system32\igfxpph.dll] [Intel Corporation, 3.0.0.3929]
[C:\WINDOWS\system32\hccutils.DLL] [Intel Corporation, 3.0.0.3929]
[C:\windows\system32\igfxres.dll] [Intel Corporation, 3.0.0.3929]
[C:\WINDOWS\system32\igfxsrvc.dll] [Intel Corporation, 3.0.0.3929]
[C:\WINDOWS\system32\igfxdev.dll] [Intel Corporation, 3.0.0.3929]
[E:\winrar\rarext.dll] [N/A, N/A]
[C:\windows\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9]
[F:\xunlei\新建文件夹\WebThunderBHO_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 2, 10]
[F:\迅雷5\ComDlls\xunleiBHO_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 1, 4]
[F:\迅雷5\Components\ResWorker\DsBho_00.dll] [, 1, 0, 0, 2]
[F:\迅雷5\Components\ResWorker\DataProcessor_00.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 4]
[C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 7.0.7.2006011200]
[PID: 1884][C:\windows\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
[C:\windows\system32\hpzll4pi.dll] [Hewlett-Packard Company, 60.061.243.00]
[C:\windows\System32\spool\PRTPROCS\W32X86\hpzpp4pi.dll] [Hewlett-Packard Corporation, 60.061.243.00]
[C:\windows\System32\spool\PRTPROCS\W32X86\vprproc.dll] [Windows (R) 2000 DDK provider, 5.00.2195.1620]
[PID: 1968][C:\windows\system32\conime.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 168][C:\Program Files\Rising\Rav\RavStub.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 4]
[C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1]
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[PID: 228][c:\program files\rising\rfw\RfwMain.exe] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 72]
[c:\program files\rising\rfw\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 33]
[c:\program files\rising\rfw\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[c:\program files\rising\rfw\RfwCtrl.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11]
[c:\program files\rising\rfw\RsXML.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2]
[c:\program files\rising\rfw\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
[PID: 552][C:\windows\SOUNDMAN.EXE] [Realtek Semiconductor Corp., 5, 1, 0, 52]
[PID: 732][C:\windows\system32\RunDll32.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\windows\system\cmicnfg.cpl] [C-Media Corporation, 1, 0, 41, 16]
[C:\windows\System32\udaprop.dll] [C-Media Corporation, 1.0.2.2]
[PID: 1208][C:\Documents and Settings\Owner\桌面\新建文件夹 (2)\AVG\AVG Anti-Spyware 7.5\avgas.exe] [Anti-Malware Development a.s., 7, 5, 0, 50]
[C:\Documents and Settings\Owner\桌面\新建文件夹 (2)\AVG\AVG Anti-Spyware 7.5\engine.dll] [Anti-Malware Development a.s., 4, 2, 0, 15]
[PID: 1316][C:\Program Files\ChinaNet\VnetClient.exe] [, 2005, 3, 7, 1]
[C:\Program Files\ChinaNet\Communicate.dll] [0, 2005, 3, 3, 1]
[C:\Program Files\ChinaNet\DialModule.dll] [, 2005, 3, 22, 1]
[C:\PROGRA~1\ChinaNet\CLIENT~1.DLL] [, 2004, 2, 28, 1]
[C:\PROGRA~1\ChinaNet\PLUGIN~1.OCX] [, 2005, 3, 7, 1]
[C:\PROGRA~1\ChinaNet\sign.dll] [0, 2004, 12, 1, 1]
[C:\PROGRA~1\ChinaNet\PostPlug.dll] [, 2004, 12, 16, 2]
[C:\PROGRA~1\ChinaNet\ADVERT~1.OCX] [, 2005, 4, 27, 2]
[C:\PROGRA~1\ChinaNet\VnetBs.ocx] [, 2004, 11, 18, 1]
[C:\PROGRA~1\ChinaNet\ACCOUN~2.DLL] [, 2005, 3, 3, 1]
[C:\PROGRA~1\ChinaNet\AccountMgr.dll] [, 2005, 6, 16, 1]
[C:\PROGRA~1\ChinaNet\PLUGIN~2.OCX] [, 2005, 2, 24, 1]
[C:\PROGRA~1\ChinaNet\NEWMES~1.DLL] [, 2004, 11, 25, 0]
[C:\PROGRA~1\ChinaNet\PassCtrl.dll] [, 1, 0, 0, 1]
[C:\windows\system32\wpcap.dll] [Politecnico di Torino, 3, 0, 0, 18]
[C:\windows\system32\pthreadVC.dll] [N/A, N/A]
[C:\windows\system32\packet.dll] [Politecnico di Torino, 3, 0, 0, 18]
[C:\PROGRA~1\ChinaNet\PlugPush.dll] [, 2004, 12, 21, 1]
[C:\PROGRA~1\ChinaNet\ALLINT~1.DLL] [, 2004, 11, 23, 1]
[C:\PROGRA~1\ChinaNet\VNetLog.ocx] [, 2005, 10, 9, 1]
[C:\PROGRA~1\ChinaNet\StatNum.dll] [, 2004, 11, 18, 1]
[C:\PROGRA~1\ChinaNet\VNETON~1.OCX] [, 2005, 3, 2, 1]
[C:\PROGRA~1\ChinaNet\ALLFUN~1.DLL] [, 2005, 6, 15, 1]
[C:\PROGRA~1\ChinaNet\VnetOptLog.dll] [, 2004, 11, 23, 1]
[C:\PROGRA~1\ChinaNet\DialogStyle.dll] [, 1, 0, 0, 1]
[C:\PROGRA~1\ChinaNet\Timer.ocx] [, 2005, 4, 30, 1]
[C:\PROGRA~1\ChinaNet\VnetSkin.ocx] [GDDC, 1, 0, 0, 1]
[C:\windows\system32\Macromed\Flash\Flash9c.ocx] [Adobe Systems, Inc., 9,0,45,0]
[C:\PROGRA~1\ChinaNet\DlgSkin.ocx] [, 1, 0, 0, 1]
[C:\Program Files\rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[PID: 1616][C:\Documents and Settings\Owner\桌面\新建文件夹 (2)\AVG\AVG Anti-Spyware 7.5\guard.exe] [Anti-Malware Development a.s., 7, 5, 0, 47]
[C:\Documents and Settings\Owner\桌面\新建文件夹 (2)\AVG\AVG Anti-Spyware 7.5\engine.dll] [Anti-Malware Development a.s., 4, 2, 0, 15]
[PID: 1552][C:\windows\system32\compmgmt.exe] [N/A, N/A]
[PID: 508][C:\WINDOWS\system32\wdfmgr.exe] [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
[PID: 1944][C:\windows\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2328][E:\Program Files\popo2004\popo.exe] [网易(163.com), 1, 0, 0, 1]
PAti - 2007-6-20 21:14:00
[E:\Program Files\popo2004\XGDI.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\XFile.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\P2PMgr.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\XComm.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\Trace.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\Updater.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\UNZIP32.dll] [Info-ZIP, 5.5]
[E:\Program Files\popo2004\ResLoc.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\MailChecker.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\ExtraEditor.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\XMP.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\fmod.dll] [Firelight Technologies Pty, Ltd, 3.73]
[E:\Program Files\popo2004\UrlObj.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\WebService.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\Bobo.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\SOX.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\share.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\XVideo.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\VCodec.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\XVoice.dll] [, 1, 0, 0, 2]
[E:\Program Files\popo2004\GIPSVoiceEngineDLL.dll] [Global IP Sound, 2, 0, 4, 0]
[E:\Program Files\popo2004\XEmotion.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\MsgHis.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\plugins\MSN.DLL] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\plugins\LIBCURL.dll] [N/A, N/A]
[E:\Program Files\popo2004\plugins\SSLEAY32.dll] [N/A, N/A]
[E:\Program Files\popo2004\plugins\LIBEAY32.dll] [N/A, N/A]
[PID: 2984][E:\Program Files\popo2004\popo.exe] [网易(163.com), 1, 0, 0, 1]
[E:\Program Files\popo2004\XGDI.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\XFile.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\P2PMgr.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\XComm.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\Trace.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\Updater.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\UNZIP32.dll] [Info-ZIP, 5.5]
[E:\Program Files\popo2004\ResLoc.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\MailChecker.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\ExtraEditor.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\XMP.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\fmod.dll] [Firelight Technologies Pty, Ltd, 3.73]
[E:\Program Files\popo2004\UrlObj.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\WebService.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\Bobo.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\SOX.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\share.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\XVideo.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\VCodec.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\XVoice.dll] [, 1, 0, 0, 2]
[E:\Program Files\popo2004\GIPSVoiceEngineDLL.dll] [Global IP Sound, 2, 0, 4, 0]
[E:\Program Files\popo2004\XEmotion.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\MsgHis.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\plugins\MSN.DLL] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\plugins\LIBCURL.dll] [N/A, N/A]
[E:\Program Files\popo2004\plugins\SSLEAY32.dll] [N/A, N/A]
[E:\Program Files\popo2004\plugins\LIBEAY32.dll] [N/A, N/A]
[PID: 3140][E:\Program Files\popo2004\popo.exe] [网易(163.com), 1, 0, 0, 1]
[E:\Program Files\popo2004\XGDI.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\XFile.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\P2PMgr.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\XComm.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\Trace.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\Updater.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\UNZIP32.dll] [Info-ZIP, 5.5]
[E:\Program Files\popo2004\ResLoc.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\MailChecker.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\ExtraEditor.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\XMP.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\fmod.dll] [Firelight Technologies Pty, Ltd, 3.73]
[E:\Program Files\popo2004\UrlObj.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\WebService.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\Bobo.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\SOX.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\share.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\XVideo.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\VCodec.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\XVoice.dll] [, 1, 0, 0, 2]
[E:\Program Files\popo2004\GIPSVoiceEngineDLL.dll] [Global IP Sound, 2, 0, 4, 0]
[E:\Program Files\popo2004\XEmotion.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\MsgHis.dll] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\plugins\MSN.DLL] [, 1, 0, 0, 1]
[E:\Program Files\popo2004\plugins\LIBCURL.dll] [N/A, N/A]
[E:\Program Files\popo2004\plugins\SSLEAY32.dll] [N/A, N/A]
[E:\Program Files\popo2004\plugins\LIBEAY32.dll] [N/A, N/A]
[PID: 2868][E:\QQ珊瑚\新建文件夹\QQ.exe] [TENCENT, 0, 0, 0, 0]
[E:\QQ珊瑚\新建文件夹\QQBaseClassInDll.dll] [, 1, 0, 0, 1]
[E:\QQ珊瑚\新建文件夹\QQHelperDll.dll] [, 1, 0, 0, 1]
[E:\QQ珊瑚\新建文件夹\BasicCtrlDll.dll] [Tencent, 7, 0, 101, 80]
[E:\QQ珊瑚\新建文件夹\QQAPI.dll] [, 1, 0, 0, 1]
[E:\QQ珊瑚\新建文件夹\TIMProxy.dll] [tencent, 0, 3, 2, 4]
[E:\QQ珊瑚\新建文件夹\LoginCtrl.dll] [N/A, N/A]
[E:\QQ珊瑚\新建文件夹\LoginCtrlRes.dll] [, 1, 0, 0, 1]
[E:\QQ珊瑚\新建文件夹\QQRes.dll] [tencent, 1, 0, 0, 1]
[E:\QQ珊瑚\新建文件夹\QQMainFrame.dll] [N/A, N/A]
[E:\QQ珊瑚\新建文件夹\CQQApplication.dll] [N/A, N/A]
[E:\QQ珊瑚\新建文件夹\NewSkin.dll] [, 1, 0, 0, 1]
[E:\QQ珊瑚\新建文件夹\HostingMgr.dll] [, 1, 0, 0, 1]
[E:\QQ珊瑚\新建文件夹\CameraDll.dll] [, 1, 0, 0, 1]
[E:\QQ珊瑚\新建文件夹\MailSummary.dll] [, 1, 0, 0, 1]
[E:\QQ珊瑚\新建文件夹\QQKnowledgeSearch.dll] [, 1, 0, 0, 1]
[E:\QQ珊瑚\新建文件夹\QQAllInOne.dll] [N/A, N/A]
[E:\QQ珊瑚\新建文件夹\GroupLive.dll] [N/A, N/A]
[E:\QQ珊瑚\新建文件夹\SCCore.dll] [TENCENT, 2, 0, 0, 1]
[E:\QQ珊瑚\新建文件夹\QQSpace.dll] [, 1, 0, 0, 1]
[C:\windows\system32\msdmo.dll] [N/A, N/A]
[E:\QQ珊瑚\新建文件夹\QQGroupMng.dll] [, 1, 0, 0, 1]
[E:\QQ珊瑚\新建文件夹\UserDefinedHead.dll] [, 1, 0, 0, 1]
[E:\QQ珊瑚\新建文件夹\QQPlugin.dll] [N/A, N/A]
[E:\QQ珊瑚\新建文件夹\QQConfigPlugin.dll] [, 1, 0, 0, 1]
[E:\QQ珊瑚\新建文件夹\QRingMng.dll] [N/A, N/A]
[E:\QQ珊瑚\新建文件夹\QQAvatar.dll] [N/A, N/A]
[E:\QQ珊瑚\新建文件夹\FlashAvatarDll.dll] [, 1, 4, 0, 1]
[E:\QQ珊瑚\新建文件夹\LongConnection.dll] [tencent, 5, 0, 200, 160]
[E:\QQ珊瑚\新建文件夹\PhoneAPI.dll] [, 1, 0, 0, 1]
[E:\QQ珊瑚\新建文件夹\DialerAllinOne.dll] [tencent, 1, 4, 0, 0]
[E:\QQ珊瑚\新建文件夹\QQPet.dll] [, 1, 0, 0, 1]
[E:\QQ珊瑚\新建文件夹\QQCustomFace.dll] [N/A, N/A]
[E:\QQ珊瑚\新建文件夹\QQSysMsgMng.dll] [N/A, N/A]
[E:\QQ珊瑚\新建文件夹\BQQApplication.dll] [N/A, N/A]
[E:\QQ珊瑚\新建文件夹\GroupConnection.dll] [Tencent, 0, 3, 3, 5]
[E:\QQ珊瑚\新建文件夹\ImageOle.dll] [TODO: <Company name>, 1.0.0.1]
[C:\Program Files\rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[E:\QQ珊瑚\新建文件夹\QQZip.dll] [tencent, 0, 3, 2, 4]
[E:\QQ珊瑚\新建文件夹\CommercesMng.dll] [, 1, 0, 0, 1]
[E:\QQ珊瑚\新建文件夹\PersonalDesktop.dll] [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
[E:\QQ珊瑚\新建文件夹\QQAddr.dll] [深圳市腾讯计算机系统有限公司, 5, 0, 101, 280]
[E:\QQ珊瑚\新建文件夹\npkcntc.dll] [INCA Internet Co., Ltd., 2006, 6, 27, 1]
[E:\QQ珊瑚\新建文件夹\npkpdb.dll] [INCA Internet Co., Ltd., 2003, 10, 1, 1]
[E:\QQ珊瑚\新建文件夹\QQSceneMng.dll] [N/A, N/A]
[E:\QQ珊瑚\新建文件夹\QQPhoneHelper.dll] [腾讯科技（深圳）有限公司, 2, 1, 9, 93]
[E:\QQ珊瑚\新建文件夹\QQFileTransfer.dll] [Tencent, 0, 3, 3, 5]
[C:\windows\system32\Macromed\Flash\Flash9c.ocx] [Adobe Systems, Inc., 9,0,45,0]
[PID: 1000][E:\QQ珊瑚\新建文件夹\TIMPlatform.exe] [tencent, 0, 3, 1, 8]
[E:\QQ珊瑚\新建文件夹\TIMProxy.dll] [tencent, 0, 3, 2, 4]
[PID: 3248][E:\rising\Maxthon\Maxthon.exe] [MY Soft Technology, 1, 5, 0, 90]
[E:\rising\Maxthon\maxzlib.dll] [ , 1, 0, 0, 2]
[F:\xunlei\新建文件夹\WebThunderBHO_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 2, 10]
[E:\rising\Maxthon\Services\RealTime\real_time.dll] [, 1, 0, 0, 1]
[C:\Program Files\rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[C:\windows\system32\Macromed\Flash\Flash9c.ocx] [Adobe Systems, Inc., 9,0,45,0]
[PID: 2460][C:\windows\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1480][F:\xunlei\新建文件夹\WebThunder.exe] [深圳市迅雷网络技术有限公司, 1, 8, 4, 130]
[F:\xunlei\新建文件夹\RegisterDll.dll] [Thunder Networking Technologies,LTD, 2, 13, 4, 58]
[F:\xunlei\新建文件夹\TaskManager.dll] [Thunder Networking Technologies,LTD, 1, 1, 1, 24]
[F:\xunlei\新建文件夹\download_interface.dll] [Thunder Networking Technologies,LTD, 2, 15, 2, 98]
[F:\xunlei\新建文件夹\stlport_vc646.dll] [STLport Consulting, Inc., 4.6.2003.1031]
[F:\xunlei\新建文件夹\asyn_dns.dll] [Thunder Networking Technologies,LTD, 2, 15, 2, 98]
[F:\xunlei\新建文件夹\Inmedia\iEmbedShell.dll] [ , 1, 0, 0, 19]
[F:\xunlei\新建文件夹\InMedia\iEmbed10.dll] [ , 3, 3, 1, 83]
[F:\xunlei\新建文件夹\CacheServer.dll] [, 1, 0, 0, 1]
[C:\Program Files\rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[C:\windows\system32\Macromed\Flash\Flash9c.ocx] [Adobe Systems, Inc., 9,0,45,0]
[PID: 568][C:\Documents and Settings\Owner\桌面\IT_sreng2\SREng.EXE] [Smallfrogs Studio, 2.3.13.690]
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\windows\hh.exe" %1]
.HLP OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS Error. []
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
N/A
==================================
API HOOK
N/A
==================================
[/CODE]
© 2000 - 2026 Rising Corp. Ltd.
，每次删光后重启浏览器就又出现了，请高手指教怎么清理