trojan.win32.agent.ppo(ppv)病毒如何处理 bbs.ikaka.com

leayer - 2007-8-6 13:18:00

[CODE]

2007-08-06,13:00:10

System Repair Engineer 2.5.16.900
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件
进程特权扫描

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Windows Publisher]
<MSPY2002><C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC> [(Verified)Microsoft Windows Publisher]
<PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [(Verified)Microsoft Windows Publisher]
<PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [(Verified)Microsoft Windows Publisher]
<High Definition Audio Property Page Shortcut><HDAShCut.exe> [(Verified)Microsoft Windows XP Publisher]
<SoundMAXPnP><C:\Program Files\Analog Devices\Core\smax4pnp.exe> [Analog Devices, Inc.]
<SoundMAX><"C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray> [Analog Devices, Inc.]
<nwiz><nwiz.exe /install> []
<runeip><"C:\Program Files\Rising\AntiSpyware\runiep.exe" /startup> [Beijing Rising Technology Co., Ltd.]
<RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.]
<IMSCMig><C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload> [(Verified)Microsoft Corporation]
<MessengerPlus3><"d:\Program Files\MessengerPlus! 3\MsgPlus.exe"> [(Verified)Patchou]
<StormCodec_Helper><"d:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti> []
<AVPSrv><C:\WINDOWS\AVPSrv.exe> [N/A]
<NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup> [(Verified)Microsoft Windows Hardware Compatibility Publisher]
<SOAServer><"C:\Documents and Settings\mis\Desktop\SOAOfficeGreen\绿色版\安装文件\SOAServer.exe" -silence> [N/A]
<360Safetray><C:\Program Files\360safe\safemon\360Tray.exe /start> [奇虎网]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Windows Publisher]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Windows Publisher]
<UIHost><logonui.exe> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll> [Beijing Rising Technology Co., Ltd.]
<{AC2DC2EF-5165-40A3-8CDF-41DCA1B0901A}><C:\WINDOWS\system32\shlhook.dll> [Beijing Rising Technology Co., Ltd.]
<{BC207F7D-3E63-4ACA-99B5-FB5F8428200C}><> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
<WinlogonNotify: WgaLogon><WgaLogon.dll> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
<Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
<Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
<Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
<Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
<NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{4b218e3e-bc98-4770-93d3-2731b9329278}]
<Internet Explorer><%SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection MarketplaceLinkInstall 896 %systemroot%\inf\ie.inf> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
<Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
<Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp.inf,PerUserStub> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
<Address Book 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}]
<N/A><C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install> [Microsoft Corporation]

==================================
启动文件夹
[服务管理器]
<C:\Documents and Settings\All Users\Start Menu\Programs\Startup\服务管理器.lnk --> C:\PROGRA~1\MICROS~2\80\Tools\Binn\sqlmangr.exe [Microsoft Corporation]><N>

==================================
服务
[Human Interface Device Access / HidServ][Stopped/Disabled]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[MSSQLSERVER / MSSQLSERVER][Running/Manual Start]
<C:\PROGRA~1\MICROS~2\MSSQL\binn\sqlservr.exe><Microsoft Corporation>
[NVIDIA Display Driver Service / NVSvc][Running/Auto Start]
<C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>
[Remote Help Session Manager / Rasautol][Stopped/Auto Start]
<C:\WINDOWS\system32\ntsokele.exe><N/A>
[Remote Packet Capture Protocol v.0 (experimental) / rpcapd][Stopped/Manual Start]
<"C:\Program Files\WinPcap\rpcapd.exe" -d -f "C:\Program Files\WinPcap\rpcapd.ini"><N/A>
[Rising Process Communication Center / RsCCenter][Running/Auto Start]
<"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[Rising RealTime Monitor / RsRavMon][Running/Auto Start]
<"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[SQLSERVERAGENT / SQLSERVERAGENT][Stopped/Manual Start]
<C:\PROGRA~1\MICROS~2\MSSQL\binn\sqlagent.exe><Microsoft Corporation>

leayer - 2007-8-6 13:19:00

==================================
驱动程序
[ADI UAA Function Driver for High Definition Audio Service / ADIHdAudAddService][Running/Manual Start]
<system32\drivers\ADIHdAud.sys><Analog Devices, Inc.>
[AEAudio Service / AEAudioService][Running/Manual Start]
<system32\drivers\AEAudio.sys><Andrea Electronics Corporation>
[Rising TDI Base Driver / BaseTDI][Running/Auto Start]
<System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.>
[ExpScaner / ExpScaner][Running/Auto Start]
<\??\C:\Program Files\Rising\Rav\ExpScan.sys><>
[hax / hax3][Stopped/Boot Start]
<\SystemRoot\System32\DRIVERS\hax3.sys><N/A>
[Microsoft UAA Function Driver for High Definition Audio Service / HdAudAddService][Stopped/Manual Start]
<system32\drivers\HdAudio.sys><Windows (R) Server 2003 DDK provider>
[Microsoft UAA Bus Driver for High Definition Audio / HDAudBus][Running/Manual Start]
<system32\DRIVERS\HDAudBus.sys><Windows (R) Server 2003 DDK provider>
[HookCont / HookCont][Running/Auto Start]
<\??\C:\Program Files\Rising\Rav\HOOKCONT.sys><Rising>
[HookReg / HookReg][Running/Auto Start]
<\??\C:\Program Files\Rising\Rav\HookReg.sys><>
[HookSys / HookSys][Running/Auto Start]
<\??\C:\Program Files\Rising\Rav\HookSys.sys><Rising>
[MEMSCAN / MEMSCAN][Running/Auto Start]
<\??\C:\Program Files\Rising\Rav\MEMSCAN.sys><Beijing Rising Technology Co., Ltd.>
[ATK0110 ACPI UTILITY / MTsensor][Running/Manual Start]
<system32\DRIVERS\ASACPI.sys><>
[NetGroup Packet Filter Driver / NPF][Stopped/Manual Start]
<system32\drivers\npf.sys><Politecnico di Torino>
[nv / nv][Running/Manual Start]
<system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
<system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[RsAntiSpyware / RsAntiSpyware][Running/Boot Start]
<\SystemRoot\system32\drivers\RsBoot.sys><Beijing Rising Technology Co., Ltd.>
[RsNTGDI / RsNTGDI][Running/Boot Start]
<\SystemRoot\system32\Drivers\RsNTGdi.sys><Beijing Rising Technology Co., Ltd.>
[RSPPSYS / RSPPSYS][Running/Auto Start]
<\??\C:\Program Files\Rising\Rav\RSPPSYS.sys><Rising>
[Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver / RTLE8023xp][Running/Manual Start]
<system32\DRIVERS\Rtenicxp.sys><Realtek Semiconductor Corporation>
[Secdrv / Secdrv][Stopped/Manual Start]
<system32\DRIVERS\secdrv.sys><N/A>
[SenFilt Service / SenFiltService][Running/Manual Start]
<system32\drivers\Senfilt.sys><Sensaura>
[TDDI / TDDI][Running/Auto Start]
<\??\C:\WINDOWS\system32\drivers\tddi.sys><SafeNet China Ltd.>

==================================
浏览器加载项
[ThunderAtOnce Class]
{01443AEC-0FD1-40fd-9C87-E93D1494C233} <C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll, N/A>
[AcroIEHlprObj Class]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[Skype add-on (mastermind)]
{22BF413B-C6D2-4d91-82A9-A0F997BA588C} <C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL, Skype Technologies S.A.>
[NavigatMon Class]
{B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, >
[Skype add-on (button)]
{77BF5300-1474-4EC7-9980-D32B190E9B07} <C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL, Skype Technologies S.A.>
[Messenger]
{FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[ThunderAtOnce Class]
{01443AEC-0FD1-40FD-9C87-E93D1494C233} <C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll, N/A>
[AcroIEHlprObj Class]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[Skype add-on (mastermind)]
{22BF413B-C6D2-4D91-82A9-A0F997BA588C} <C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL, Skype Technologies S.A.>
[Active Desktop Mover]
{72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A>
[Skype add-on (button)]
{77BF5300-1474-4EC7-9980-D32B190E9B07} <C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL, Skype Technologies S.A.>
[NavigatMon Class]
{B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, >
[上传到QQ网络硬盘]
<D:\Program Files\Tencent\QQ\AddToNetDisk.htm, N/A>
[导出到 Microsoft Office Excel(&X)]
<res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000, N/A>
[添加到QQ自定义面板]
<D:\Program Files\Tencent\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
<D:\Program Files\Tencent\QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<D:\Program Files\Tencent\QQ\SendMMS.htm, N/A>

==================================

leayer - 2007-8-6 13:20:00

正在运行的进程
[PID: 604 / SYSTEM][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 660 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 684 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\WgaLogon.dll] [Microsoft Corporation, 1.7.0018.5]
[C:\WINDOWS\system32\IMSC40A.IME] [Microsoft Corporation, 6.0.0.2527]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 728 / SYSTEM][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 740 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 896 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 976 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1064 / SYSTEM][C:\Program Files\Rising\Rav\CCenter.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3]
[PID: 1080 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1200 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1236 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1488 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
[C:\WINDOWS\system32\mdimon.dll] [Microsoft Corporation, 11.3.1897.0]
[C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll] [Microsoft Corporation, 11.3.1897.0]
[PID: 1884 / SYSTEM][C:\WINDOWS\system32\inetsrv\inetinfo.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1948 / NETWORK SERVICE][C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe] [Microsoft Corporation, 2005.090.1399.00]
[C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\opends60.dll] [Microsoft Corporation, 2005.090.1399.00]
[C:\Program Files\Microsoft SQL Server\90\Shared\instapi.dll] [Microsoft Corporation, 2005.090.1399.00]
[C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\Resources\1033\sqlevn70.RLL] [Microsoft Corporation, 2005.090.1399.00]
[C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\Resources\2052\sqlevn70.RLL] [Microsoft Corporation, 2005.090.1399.00]
[C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\SQLOS.DLL] [Microsoft Corporation, 2005.090.1399.00]
[C:\WINDOWS\system32\MSCOREE.DLL] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[PID: 2032 / mis][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\IMSC40A.IME] [Microsoft Corporation, 6.0.0.2527]
[C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9]
[C:\WINDOWS\system32\shlhook.dll] [Beijing Rising Technology Co., Ltd., 4.0.0.7]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[C:\Program Files\Internet Explorer\mui\0804\shdoclc.dll] [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148)]
[d:\Program Files\MessengerPlus! 3\MsgPlusLoader.dll] [Patchou, 3, 63, 4, 0]
[C:\PROGRA~1\COMMON~1\MICROS~1\IME\SHARED2.0\MSCAND20.DLL] [Microsoft Corporation, 9.0.5510.0]
[C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[D:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll] [Adobe Systems, Inc., 7.0.0.0]
[C:\WINDOWS\system32\nvcpl.dll] [NVIDIA Corporation, 6.14.10.9381]
[C:\WINDOWS\system32\NVRSZHC.DLL] [NVIDIA Corporation, 6.14.10.9381]
[C:\WINDOWS\system32\nvapi.dll] [N/A, ]
[C:\WINDOWS\system32\nvshell.dll] [, ]
[C:\Program Files\WinRAR\rarext.dll] [N/A, ]
[C:\Program Files\Unlocker\UnlockerCOM.dll] [N/A, ]
[C:\Program Files\Internet Explorer\mui\0804\browselc.dll] [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148)]
[D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 7.0.0.2004121400]
[C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[C:\Program Files\Microsoft Office\OFFICE11\msohev.dll] [Microsoft Corporation, 11.0.5510]
[PID: 148 / SYSTEM][C:\WINDOWS\system32\nvsvc32.exe] [NVIDIA Corporation, 6.14.10.9381]
[C:\WINDOWS\system32\nvapi.dll] [N/A, ]
[C:\WINDOWS\system32\IMSC40A.IME] [Microsoft Corporation, 6.0.0.2527]
[PID: 232 / NETWORK SERVICE][C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe] [Microsoft Corporation, 2005.090.1399.00]
[C:\Program Files\Microsoft SQL Server\90\Shared\instapi.dll] [Microsoft Corporation, 2005.090.1399.00]
[PID: 1868 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2148 / mis][C:\Program Files\Analog Devices\Core\smax4pnp.exe] [Analog Devices, Inc., 6, 0, 0, 20]
[C:\Program Files\Analog Devices\Core\SMWDMIF.dll] [Analog Devices, Inc., 6, 0, 4000, 014]
[C:\WINDOWS\system32\IMSC40A.IME] [Microsoft Corporation, 6.0.0.2527]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001]
[d:\Program Files\MessengerPlus! 3\MsgPlusLoader.dll] [Patchou, 3, 63, 4, 0]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[PID: 2156 / mis][C:\Program Files\Analog Devices\SoundMAX\Smax4.exe] [Analog Devices, Inc., 5, 2, 0, 11]
[C:\WINDOWS\system32\IMSC40A.IME] [Microsoft Corporation, 6.0.0.2527]
[C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001]
[d:\Program Files\MessengerPlus! 3\MsgPlusLoader.dll] [Patchou, 3, 63, 4, 0]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[PID: 2196 / mis][C:\Program Files\Rising\AntiSpyware\runiep.exe] [Beijing Rising Technology Co., Ltd., 4.0.0.15]
[C:\WINDOWS\system32\IMSC40A.IME] [Microsoft Corporation, 6.0.0.2527]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[PID: 2228 / mis][C:\Program Files\Rising\Rav\RavTask.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9]
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
[C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
[C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1]
[C:\WINDOWS\system32\IMSC40A.IME] [Microsoft Corporation, 6.0.0.2527]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[PID: 2332 / mis][D:\Program Files\MessengerPlus! 3\MsgPlus.exe] [Patchou, 3, 63, 0, 148]
[d:\Program Files\MessengerPlus! 3\MsgPlusLoader.dll] [Patchou, 3, 63, 4, 0]
[C:\WINDOWS\system32\IMSC40A.IME] [Microsoft Corporation, 6.0.0.2527]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[PID: 2516 / mis][C:\Program Files\360safe\safemon\360Tray.exe] [奇虎网, 3, 5, 2, 1001]
[d:\Program Files\MessengerPlus! 3\MsgPlusLoader.dll] [Patchou, 3, 63, 4, 0]
[C:\WINDOWS\system32\IMSC40A.IME] [Microsoft Corporation, 6.0.0.2527]
[C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001]
[C:\Program Files\360safe\safemon\SafeKrnl.dll] [奇虎网, 3, 5, 0, 1001]
[C:\Program Files\360safe\AntiAdwa.dll] [360Safe.com, 3, 5, 1, 1001]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[C:\Program Files\360safe\live.dll] [360safe.com, 1, 0, 1, 1018]
[PID: 2520 / mis][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[d:\Program Files\MessengerPlus! 3\MsgPlusLoader.dll] [Patchou, 3, 63, 4, 0]
[C:\WINDOWS\system32\IMSC40A.IME] [Microsoft Corporation, 6.0.0.2527]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001]
[PID: 2668 / mis][C:\Program Files\Outlook Express\msimn.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Internet Explorer\mui\0804\acctres.dll] [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148)]
[C:\Program Files\Internet Explorer\mui\0804\inetres.dll] [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148)]
[C:\Program Files\Internet Explorer\mui\0804\msoeres.dll] [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148)]
[C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001]
[d:\Program Files\MessengerPlus! 3\MsgPlusLoader.dll] [Patchou, 3, 63, 4, 0]
[C:\Program Files\Internet Explorer\mui\0804\msidntld.dll] [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148)]
[C:\WINDOWS\system32\IMSC40A.IME] [Microsoft Corporation, 6.0.0.2527]
[C:\Program Files\Internet Explorer\mui\0804\shdoclc.dll] [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148)]
[C:\Program Files\Internet Explorer\mui\0804\wab32res.dll] [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148)]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[C:\PROGRA~1\COMMON~1\MICROS~1\IME\SHARED2.0\MSCAND20.DLL] [Microsoft Corporation, 9.0.5510.0]
[C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]

leayer - 2007-8-6 13:22:00

[PID: 2088 / mis][C:\Program Files\Skype\Phone\Skype.exe] [Skype Technologies S.A., 3.0.0.209]
[C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001]
[d:\Program Files\MessengerPlus! 3\MsgPlusLoader.dll] [Patchou, 3, 63, 4, 0]
[C:\WINDOWS\system32\IMSC40A.IME] [Microsoft Corporation, 6.0.0.2527]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[C:\WINDOWS\system32\devenum.dll] [, ]
[C:\WINDOWS\system32\msdmo.dll] [, ]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 3144 / mis][C:\Program Files\Skype\Plugin Manager\SkypePM.exe] [Skype Technologies, 1.0.0.171]
[C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001]
[d:\Program Files\MessengerPlus! 3\MsgPlusLoader.dll] [Patchou, 3, 63, 4, 0]
[C:\WINDOWS\system32\IMSC40A.IME] [Microsoft Corporation, 6.0.0.2527]
[C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll] [EasyBits Software Corp., 1.0.0.536]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[PID: 3784 / mis][C:\Program Files\MSN Messenger\msnmsgr.exe] [Microsoft Corporation, 7.5.0324]
[C:\Program Files\MSN Messenger\msidcrl.dll] [Microsoft Corp., 3.200.60.1]
[C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001]
[d:\Program Files\MessengerPlus! 3\MsgPlusLoader.dll] [Patchou, 3, 63, 4, 0]
[C:\Program Files\MSN Messenger\MSGSLANG.DLL] [Microsoft Corporation, 7.5.0324]
[C:\WINDOWS\system32\IMSC40A.IME] [Microsoft Corporation, 6.0.0.2527]
[d:\Program Files\MessengerPlus! 3\MsgPlusH.dll] [Patchou, 3, 63, 0, 148]
[d:\Program Files\MessengerPlus! 3\Detoured.dll] [N/A, ]
[d:\Program Files\MessengerPlus! 3\Resources\MsgPlusRes.dll] [Patchou, 3, 63, 4, 0]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[d:\Program Files\MessengerPlus! 3\RichEdHook.dll] [N/A, ]
[C:\WINDOWS\system32\msdmo.dll] [, ]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\system32\devenum.dll] [, ]
[PID: 2300 / mis][C:\WINDOWS\system32\conime.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001]
[d:\Program Files\MessengerPlus! 3\MsgPlusLoader.dll] [Patchou, 3, 63, 4, 0]
[C:\WINDOWS\system32\IMSC40A.IME] [Microsoft Corporation, 6.0.0.2527]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[PID: 2656 / mis][E:\MIS系统全\仓库管理\仓库管理(719定型)\DepMis.exe] [wanshih, 1.00]
[C:\WINDOWS\system32\MSVBVM60.DLL] [Microsoft Corporation, 6.00.9690]
[C:\WINDOWS\system32\vb6chs.dll] [Microsoft Corporation, 6.00.8169]
[C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001]
[d:\Program Files\MessengerPlus! 3\MsgPlusLoader.dll] [Patchou, 3, 63, 4, 0]
[C:\WINDOWS\system32\IMSC40A.IME] [Microsoft Corporation, 6.0.0.2527]
[C:\Program Files\Common Files\System\Ole DB\sqloledb.dll] [Microsoft Corporation, 2000.085.1117.00 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\DBmsLPCn.dll] [Microsoft Corporation, 2000.080.0194.00]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[PID: 2900 / mis][C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe] [Microsoft Corporation, 2000.080.0194.00]
[C:\Program Files\Microsoft SQL Server\80\Tools\Binn\W95SCM.dll] [Microsoft Corporation, 2000.080.0194.00]
[C:\Program Files\Microsoft SQL Server\80\Tools\Binn\SQLSVC.dll] [Microsoft Corporation, 2000.080.0194.00]
[C:\WINDOWS\system32\odbcbcp.dll] [Microsoft Corporation, 2000.085.1117.00 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Microsoft SQL Server\80\Tools\Binn\SQLRESLD.dll] [Microsoft Corporation, 2000.080.0194.00]
[C:\Program Files\Microsoft SQL Server\80\Tools\Binn\Resources\2052\SQLSVC.RLL] [Microsoft Corporation, 2000.080.0194.00]
[C:\Program Files\Microsoft SQL Server\80\Tools\Binn\Resources\2052\sqlmangr.RLL] [Microsoft Corporation, 2000.080.0194.00]
[C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001]
[d:\Program Files\MessengerPlus! 3\MsgPlusLoader.dll] [Patchou, 3, 63, 4, 0]
[C:\WINDOWS\system32\IMSC40A.IME] [Microsoft Corporation, 6.0.0.2527]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[PID: 2420 / SYSTEM][C:\PROGRA~1\MICROS~2\MSSQL\binn\sqlservr.exe] [Microsoft Corporation, 2000.080.0194.00]
[C:\PROGRA~1\MICROS~2\MSSQL\binn\OPENDS60.DLL] [Microsoft Corporation, 2000.080.0194.00]
[C:\PROGRA~1\MICROS~2\MSSQL\binn\UMS.DLL] [Microsoft Corporation, 2000.080.0194.00]
[C:\PROGRA~1\MICROS~2\MSSQL\binn\SQLSORT.DLL] [Microsoft Corporation, 2000.080.0194.00]
[C:\PROGRA~1\MICROS~2\MSSQL\binn\Resources\2052\sqlevn70.RLL] [Microsoft Corporation, 2000.080.0194.00]
[C:\PROGRA~1\MICROS~2\MSSQL\binn\SSNETLIB.dll] [Microsoft Corporation, 2000.080.0194.00]
[C:\PROGRA~1\MICROS~2\MSSQL\binn\SSNMPN70.dll] [Microsoft Corporation, 2000.080.0194.00]
[C:\PROGRA~1\MICROS~2\MSSQL\binn\SSmsLPCn.dll] [Microsoft Corporation, 2000.080.0194.00]

leayer - 2007-8-6 13:24:00

[PID: 3136 / mis][D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\devenv.exe] [Microsoft Corporation, 8.0.50727.762 built by: SP]
[D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\custsat.dll] [Microsoft Corporation, 9.0.3790.2428 (srv03_sp1_qfe.050422-1043)]
[C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001]
[d:\Program Files\MessengerPlus! 3\MsgPlusLoader.dll] [Patchou, 3, 63, 4, 0]
[C:\WINDOWS\system32\IMSC40A.IME] [Microsoft Corporation, 6.0.0.2527]
[D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\msenv.dll] [Microsoft Corporation, 8.0.50727.762 (SP.050727-7600)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\2052\msenvui.dll] [Microsoft Corporation, 8.0.50727.762 (SP.050727-7600)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\2052\msenvmui.dll] [Microsoft Corporation, 8.0.50727.42 built by: RTM]
[C:\Program Files\Common Files\Microsoft Shared\VS7Debug\msdbg2.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[C:\Program Files\Common Files\Microsoft Shared\VS7Debug\coloader80.dll] [Microsoft Corporation, 8.0.50727.42 built by: RTM]
[D:\Program Files\Microsoft Visual Studio 8\Common7\Packages\2052\htmledui.dll] [Microsoft Corporation, 8.0.50727.762 (SP.050727-7600)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\2052\Microsoft.VisualStudio.Windows.FormsUI.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\PrivateAssemblies\2052\Microsoft.VisualStudio.EnterpriseTools.ClassDesignerUI.dll] [Microsoft Corporation, 8.0.50727.42]
[C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\2c9986f0f331440ff369f300d6a64d51\mscorlib.ni.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\f9e0cc41d4708780bfbd7858d0ad6d6f\System.ni.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\911d21955768d3c5984a71f73e7d0fb8\Microsoft.VisualStudio.CommonIDE.ni.dll] [Microsoft Corporation, 8.0.50727.42]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\765b7f8eb71d453c39797592675b65f1\System.Drawing.ni.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\08608f236cbf6293adcba5b1ad8a5501\System.Windows.Forms.ni.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.EnterpriseTools.ClassDesigner\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.EnterpriseTools.ClassDesigner.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.EnterpriseTools.ClassDesigner.resources\8.0.0.0_zh-CHS_b03f5f7f11d50a3a\Microsoft.VisualStudio.EnterpriseTools.ClassDesigner.resources.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_zh-CHS_b77a5c561934e089\mscorlib.resources.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\2052\Microsoft.VisualStudio.WebUI.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\PrivateAssemblies\2052\Microsoft.ReportDesignerUI.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[D:\Program Files\Microsoft Visual Studio 8\Visual Studio Tools for Office\vspkgs\2052\VSTOExcelClientPkgUI.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[D:\Program Files\Microsoft Visual Studio 8\Visual Studio Tools for Office\vspkgs\2052\VSTOWordClientPkgUI.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\Tools\VDT\2052\vdt80pui.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\VS SCC\2052\VssProviderui.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\Packages\Debugger\2052\VSDebugUI.dll] [Microsoft Corporation, 8.0.50727.762 (SP.050727-7600)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\vslog.dll] [Microsoft Corporation, 8.0.50727.762 built by: SP]
[D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\2052\VsLogUI.dll] [Microsoft Corporation, 8.0.50727.42 built by: RTM]
[D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\msenvmnu.dll] [Microsoft Corporation, 8.0.50727.762 built by: SP]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[D:\Program Files\Microsoft Visual Studio 8\VB\Bin\2052\msvbprjui.dll] [Microsoft Corporation, 8.0.50727.762 built by: SP]
[D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\PrivateAssemblies\2052\Microsoft.VisualStudio.EnterpriseTools.SdmDesignersUI.dll] [Microsoft Corporation, 8.0.50727.42]
[D:\Program Files\Microsoft Visual Studio 8\Common7\Packages\2052\mswebprjui.dll] [Microsoft Corporation, 8.0.50727.762 (SP.050727-7600)]
[D:\Program Files\Microsoft Visual Studio 8\VJ#\bin\2052\vjsprojui.dll] [Microsoft Corporation, 8.0.50727.762 built by: SP]
[D:\Program Files\Microsoft Visual Studio 8\VC\VCPackages\2052\VCProjectUI.dll] [Microsoft Corporation, 8.0.50727.762 built by: SP(DDBLD307-dlab)]
[D:\Program Files\Microsoft Visual Studio 8\VC#\VCSPackages\2052\csprojui.dll] [Microsoft Corporation, 8.0.50727.762 built by: SP]
[D:\Program Files\Microsoft Visual Studio 8\Crystal Reports\resources\2052\CRVsPackageUI.dll] [Business Objects, 10.2.9700.0]
[D:\Program Files\Microsoft Visual Studio 8\Common7\Packages\2052\vdtflavui.dll] [Microsoft Corporation, 8.0.50727.42 built by: RTM]
[D:\Program Files\Microsoft Visual Studio 8\Visual Studio Tools for Office\vspkgs\2052\VSTOAppClientPkgUI.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[D:\Program Files\Microsoft Visual Studio 8\VC\VCPackages\2052\vcpkgui.dll] [Microsoft Corporation, 8.0.50727.762 built by: SP(DDBLD307-dlab)]
[C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Shell\2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Shell.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\assembly\GAC\Microsoft.VisualStudio.Shell.Interop\7.1.40304.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Shell.Interop.dll] [Microsoft Corporation, 7.0.4054]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\8a67cf08d3d0daa8baebcf531c86aa64\Microsoft.VisualStudio.OLE.Interop.ni.dll] [Microsoft Corporation, 7.0.4054]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\44a573df4d5c4c4943df1444b8c34db7\Microsoft.VisualStudio.Shell.Interop.8.0.ni.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\assembly\GAC\Microsoft.VisualStudio.VSHelp80\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.VSHelp80.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Design\4eb8b02f2aaec1ef2a7e367974c76077\System.Design.ni.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]

leayer - 2007-8-6 13:25:00

[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\9d8cfd67b3e53c22de30748fbda2a7d9\System.Xml.ni.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\06f2476a262b3d3bb51e85af0c7f197f\System.Configuration.ni.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[D:\Program Files\Microsoft Visual Studio 8\EnterpriseFrameworks\2052\etpprojui.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Microsoft.VisualStudio.TemplateWizard.dll] [Microsoft Corporation, 8.0.50727.762]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\EnvDTE\435d632fe756a6b81d8340a530351de9\EnvDTE.ni.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\assembly\GAC\Microsoft.VisualStudio.TextManager.Interop\7.1.40304.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.TextManager.Interop.dll] [Microsoft Corporation, 7.0.4054]
[C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.TemplateWizardInterface\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.TemplateWizardInterface.dll] [Microsoft Corporation, 8.0.50727.42]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\EnvDTE80\ff0bc257bfdfc81a60ed9dd17349c476\EnvDTE80.ni.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\Packages\Debugger\vsdebug.dll] [Microsoft Corporation, 8.0.50727.762 (SP.050727-7600)]
[D:\Program Files\Microsoft Visual Studio 8\Team Tools\Static Analysis Tools\stanpackage.dll] [Microsoft Corporation, 8.0.50727.762 built by: SP(DDBLD307-dlab)]
[D:\Program Files\Microsoft Visual Studio 8\VC#\VCSPackages\csproj.dll] [Microsoft Corporation, 8.0.50727.762 built by: SP]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\c0b95cddc9317bd6b2a8dc1ab2c09b1e\Microsoft.Build.Engine.ni.dll] [Microsoft Corporation, 2.0.50727.832 built by: QFE]
[C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine.resources\2.0.0.0_zh-CHS_b03f5f7f11d50a3a\Microsoft.Build.Engine.resources.dll] [Microsoft Corporation, 2.0.50727.42 built by: RTM]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\03c2f2a55909ec1c49dfb9e19bb15719\Microsoft.Build.Framework.ni.dll] [Microsoft Corporation, 2.0.50727.42 built by: RTM]
[D:\Program Files\Microsoft Visual Studio 8\Common7\Packages\dirprj.dll] [Microsoft Corporation, 8.0.50727.762 built by: SP]
[D:\Program Files\Microsoft Visual Studio 8\Common7\Packages\2052\dirprjui.dll] [Microsoft Corporation, 8.0.50727.42 built by: RTM]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\a277df3e42a5cce121a22bbc355e67e3\CustomMarshalers.ni.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Xml\Microsoft.XmlEditor.dll] [Microsoft Corporation, 2.0.50727.762 (SP.050727-7600)]
[C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Package.LanguageService\2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Package.LanguageService.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\assembly\GAC\Microsoft.VisualStudio.TextManager.Interop.8.0\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.TextManager.Interop.8.0.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\assembly\GAC_MSIL\Microsoft.MSXML\8.0.0.0__b03f5f7f11d50a3a\Microsoft.MSXML.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\system32\msxml6.dll] [Microsoft Corporation, 6.00.3890.0]
[D:\Program Files\Microsoft Visual Studio 8\VC#\VCSPackages\cslangsvc.dll] [Microsoft Corporation, 8.0.50727.762 built by: SP]
[D:\Program Files\Microsoft Visual Studio 8\VC#\VCSPackages\2052\cslangsvcui.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\Packages\Compsvcspkg.dll] [Microsoft Corporation, 8.0.50727.762 built by: SP]
[D:\Program Files\Microsoft Visual Studio 8\Common7\Packages\2052\compsvcspkgui.dll] [Microsoft Corporation, 8.0.50727.42 built by: RTM]
[C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Design\2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Design.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\61fcd6c83e9dc60327385636f49c771b\Microsoft.VisualStudio.Designer.Interfaces.ni.dll] [Microsoft Corporation, 1.1.4322.573]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\03fce89ff0842ce31658bf23461c4e44\Microsoft.VisualStudio.Shell.Design.ni.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fusion.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Xml\zh-CHS\Microsoft.XmlEditor.resources.dll] [Microsoft Corporation, 2.0.50727.762 (SP.050727-7600)]
[C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio\2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.dll] [Microsoft Corporation, 2.0.50727.42 built by: RTM]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\1131c18dc8dc1ef3841dc43002c8a8a9\System.Drawing.Design.ni.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.resources\2.0.0.0_zh-CHS_b03f5f7f11d50a3a\Microsoft.VisualStudio.resources.dll] [Microsoft Corporation, 2.0.50727.42 built by: RTM]
[C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_zh-CHS_b77a5c561934e089\System.Windows.Forms.resources.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\d41a09e4318c23bb5d2c7d35b9457512\Microsoft.Build.Tasks.ni.dll] [Microsoft Corporation, 2.0.50727.832 built by: QFE]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\5bf9ce99e8fb9ef3c91aa6409d98c048\Microsoft.Build.Utilities.ni.dll] [Microsoft Corporation, 2.0.50727.42 built by: RTM]
[C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks.resources\2.0.0.0_zh-CHS_b03f5f7f11d50a3a\Microsoft.Build.Tasks.resources.dll] [Microsoft Corporation, 2.0.50727.42 built by: RTM]
[C:\WINDOWS\assembly\GAC\VSLangProj\7.0.3300.0__b03f5f7f11d50a3a\VSLangProj.dll] [Microsoft Corporation, 7.00.9466]

leayer - 2007-8-6 13:26:00

[C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Design.resources\2.0.0.0_zh-CHS_b03f5f7f11d50a3a\Microsoft.VisualStudio.Design.resources.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Windows.Forms\2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Windows.Forms.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\852be8f752663a79b42415eb82dea5a6\Accessibility.ni.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\assembly\GAC_MSIL\System.resources\2.0.0.0_zh-CHS_b77a5c561934e089\System.resources.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Windows.Forms.resources\2.0.0.0_zh-CHS_b03f5f7f11d50a3a\Microsoft.VisualStudio.Windows.Forms.resources.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VSDesigner\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VSDesigner.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VSDesigner.resources\8.0.0.0_zh-CHS_b03f5f7f11d50a3a\Microsoft.VSDesigner.resources.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Microsoft.VisualStudio.Data.Interop.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.WizardFramework\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.WizardFramework.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\Packages\Debugger\encmgr.dll] [Microsoft Corporation, 8.0.50727.762 (SP.050727-7600)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\Packages\Debugger\ecbuild.dll] [Microsoft Corporation, 8.0.50727.762 (SP.050727-7600)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\Packages\Debugger\cpde.dll] [Microsoft Corporation, 8.0.50727.762 (SP.050727-7600)]
[C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)]
[C:\Program Files\Common Files\Microsoft Shared\VS7Debug\csm.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\vsmacros.dll] [Microsoft Corporation, 8.0.50727.762 (SP.050727-7600)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\2052\vsmacrosui.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\Packages\Debugger\shmetapdb.dll] [Microsoft Corporation, 8.0.50727.762 (SP.050727-7600)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\Packages\Debugger\cscompee.dll] [Microsoft Corporation, 8.0.50727.762 (SP.050727-7600)]
[C:\WINDOWS\assembly\GAC_MSIL\System.Design.resources\2.0.0.0_zh-CHS_b03f5f7f11d50a3a\System.Design.resources.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data\bf763753987a6752548322a41ab47e73\System.Data.ni.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Microsoft.VSDesigner.Management.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\2052\Microsoft.VSDesignerUI.DLL] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Microsoft.VisualStudio.Data.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Microsoft.VisualStudio.DataTools.dll] [Microsoft Corporation, 8.0.50727.762 (SP.050727-7600)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Microsoft.Data.ConnectionUI.Dialog.dll] [Microsoft Corporation, 8.0.50727.762 (SP.050727-7600)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Microsoft.Data.ConnectionUI.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Transactions\1991332a7b4c79030de26977aa2d9981\System.Transactions.ni.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Microsoft.VisualStudio.DataTools.Interop.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\zh-CHS\Microsoft.VisualStudio.DataTools.resources.dll] [Microsoft Corporation, 8.0.50727.762 (SP.050727-7600)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\zh-CHS\Microsoft.Data.ConnectionUI.Dialog.resources.dll] [Microsoft Corporation, 8.0.50727.762 (SP.050727-7600)]
[C:\Program Files\Microsoft SQL Server\90\Shared\instapi.dll] [Microsoft Corporation, 2005.090.1399.00]
[C:\WINDOWS\system32\dbmslpcn.dll] [Microsoft Corporation, 2000.080.0194.00]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\f4e78db696f3568c34bfbb66a27d5fc5\System.EnterpriseServices.ni.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Security\34e37b96cc209ff5b60b147f3c975d43\System.Security.ni.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\assembly\GAC\Microsoft.VisualStudio.Debugger.Interop\8.0.1.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Debugger.Interop.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\assembly\GAC_MSIL\System.Data.resources\2.0.0.0_zh-CHS_b77a5c561934e089\System.Data.resources.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\Tools\VDT\vdt80p.dll] [Microsoft Corporation, 8.0.50727.762 (SP.050727-7600)]
[C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Microsoft.VisualStudio.vspSmoEnum.dll] [Microsoft Corporation, 9.00.1314.00]
[D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Microsoft.VisualStudio.vspConnectionInfo.dll] [Microsoft Corporation, 9.00.1314.00]
[D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Microsoft.VisualStudio.vspSqlEnum.dll] [Microsoft Corporation, 9.00.1314.00]
[D:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Microsoft.VisualStudio.vspBatchParser.dll] [Microsoft Corporation, 2005.090.1314.00]
[C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.resources\2.0.0.0_zh-CHS_b03f5f7f11d50a3a\System.Drawing.resources.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.WizardFramework.resources\8.0.0.0_zh-CHS_b03f5f7f11d50a3a\Microsoft.VisualStudio.WizardFramework.resources.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Editors\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Editors.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Deployment\fd3a95f0158de6cb4ddfb9381154a8b3\System.Deployment.ni.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\bda938791ea3d1a49d7511f8ddc8bbcd\Microsoft.VisualBasic.ni.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\Tools\VDT\vdt80.dll] [Microsoft Corporation, 8.0.50727.762 (SP.050727-7600)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\Tools\VDT\2052\vdt80ui.DLL] [Microsoft Corporation, 8.0.50727.762 (SP.050727-7600)]
[C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Editors.resources\8.0.0.0_zh-CHS_b03f5f7f11d50a3a\Microsoft.VisualStudio.Editors.resources.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[D:\Program Files\Microsoft Visual Studio 8\Crystal Reports\resources\2052\CRDesignerUI.dll] [ Business Objects, 10.2.0.1150]
[D:\Program Files\Microsoft Visual Studio 8\Visual Studio Tools for Office\vspkgs\2052\VSTOProjectUI.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[D:\Program Files\Microsoft Visual Studio 8\VC\VCPackages\2052\VCPropertyManagerUI.dll] [Microsoft Corporation, 8.0.50727.42 built by: RTM(DDBLD587-dlab)]

leayer - 2007-8-6 13:27:00

[C:\Documents and Settings\mis\Local Settings\Application Data\Microsoft\VisualStudio\8.0\ProjectAssemblies\9chnnkhr01\NorthwindDataSet.Designer.cs.dll] [, 0.0.0.0]
[C:\WINDOWS\assembly\GAC_MSIL\System.Xml.resources\2.0.0.0_zh-CHS_b77a5c561934e089\System.Xml.resources.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities.resources\2.0.0.0_zh-CHS_b03f5f7f11d50a3a\Microsoft.Build.Utilities.resources.dll] [Microsoft Corporation, 2.0.50727.42 built by: RTM]
[C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.CommonIDE\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.CommonIDE.dll] [Microsoft Corporation, 8.0.50727.42]
[C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[C:\WINDOWS\assembly\GAC\Microsoft.VisualStudio.Shell.Interop.8.0\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Shell.Interop.8.0.dll] [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[C:\WINDOWS\assembly\GAC\Microsoft.VisualStudio.OLE.Interop\7.1.40304.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.OLE.Interop.dll] [Microsoft Corporation, 7.0.4054]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[D:\Program Files\Microsoft Visual Studio 8\Common7\Packages\Debugger\2052\msdbgui.dll] [Microsoft Corporation, 8.0.50727.762 (SP.050727-7600)]
[C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[PID: 3416 / mis][D:\vs2005project\dataread\dataread\bin\Debug\dataread.vshost.exe] [Microsoft Corporation, 8.0.50727.42]
[C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\2c9986f0f331440ff369f300d6a64d51\mscorlib.ni.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.HostingProcess.Utilities\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.HostingProcess.Utilities.dll] [Microsoft Corporation, 8.0.50727.42]
[C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\f9e0cc41d4708780bfbd7858d0ad6d6f\System.ni.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\765b7f8eb71d453c39797592675b65f1\System.Drawing.ni.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\08608f236cbf6293adcba5b1ad8a5501\System.Windows.Forms.ni.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.HostingProcess.Utilities.Sync\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.HostingProcess.Utilities.Sync.dll] [Microsoft Corporation, 8.0.50727.42]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data\bf763753987a6752548322a41ab47e73\System.Data.ni.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Deployment\fd3a95f0158de6cb4ddfb9381154a8b3\System.Deployment.ni.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\9d8cfd67b3e53c22de30748fbda2a7d9\System.Xml.ni.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[PID: 3756 / SYSTEM][C:\Program Files\Rising\Rav\Ravmond.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 49]
[C:\Program Files\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10]
[C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1]
[C:\Program Files\Rising\Rav\rfwctrl.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11]
[C:\Program Files\Rising\Rav\RsPPsys.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6]
[C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
[C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[C:\Program Files\Rising\Rav\RsLog.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20]
[C:\Program Files\Rising\Rav\HOOKSYS.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 0]
[C:\Program Files\Rising\Rav\Scanner.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 15]
[C:\Program Files\Rising\Rav\libload.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16]
[C:\Program Files\Rising\Rav\VirusLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 15]
[C:\Program Files\Rising\Rav\regmon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6]
[C:\Program Files\Rising\Rav\psapi.dll] [Microsoft Corporation, 4.00]
[C:\Program Files\Rising\Rav\HookWeb.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 1]
[C:\Program Files\Rising\Rav\MemMon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 14]
[C:\Program Files\Rising\Rav\expscan.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[C:\Program Files\Rising\Rav\mPorts.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3]
[C:\Program Files\Rising\Rav\HookCont.dll] [Rising, 19, 0, 0, 0]
[C:\Program Files\Rising\Rav\SpamEng.dll] [, 18, 0, 0, 6]
[C:\Program Files\Rising\Rav\engine.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 30]
[C:\Program Files\Rising\Rav\PostTrt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16]
[C:\Program Files\Rising\Rav\UnExe.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10]
[C:\Program Files\Rising\Rav\ScanExec.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19]
[C:\Program Files\Rising\Rav\ExtFile.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 36]
[C:\Program Files\Rising\Rav\ScanEx.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 73]

leayer - 2007-8-6 13:27:00

[C:\Program Files\Rising\Rav\NvFile.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 11]
[C:\Program Files\Rising\Rav\ScanMac.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 14]
[C:\Program Files\Rising\Rav\ScanSct.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 20]
[C:\Program Files\Rising\Rav\ScanPack.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 24]
[C:\Program Files\Rising\Rav\RsVM.dll] [, 19, 0, 0, 20]
[C:\Program Files\Rising\Rav\Uroutine.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 48]
[C:\Program Files\Rising\Rav\Uscript.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19]
[PID: 1752 / mis][C:\Program Files\Rising\Rav\RAVMON.EXE] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 45]
[C:\Program Files\Rising\Rav\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 33]
[C:\Program Files\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10]
[C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
[C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1]
[C:\Program Files\Rising\Rav\RsXML.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2]
[C:\Program Files\Rising\Rav\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
[C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001]
[d:\Program Files\MessengerPlus! 3\MsgPlusLoader.dll] [Patchou, 3, 63, 4, 0]
[C:\WINDOWS\system32\IMSC40A.IME] [Microsoft Corporation, 6.0.0.2527]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[PID: 3736 / SYSTEM][C:\Program Files\Rising\Rav\RavStub.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 4]
[C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1]
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[PID: 3244 / mis][D:\Program Files\Maxthon\Maxthon.exe] [Maxthon International Ltd., 1, 6, 1, 50]
[D:\Program Files\Maxthon\maxzlib.dll] [ , 1, 0, 0, 2]
[C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001]
[d:\Program Files\MessengerPlus! 3\MsgPlusLoader.dll] [Patchou, 3, 63, 4, 0]
[C:\WINDOWS\system32\IMSC40A.IME] [Microsoft Corporation, 6.0.0.2527]
[C:\WINDOWS\system32\odbcbcp.dll] [Microsoft Corporation, 2000.085.1117.00 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CorperfmonExt.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
[C:\WINDOWS\system32\sqlctr90.dll] [Microsoft Corporation, 2005.090.1399.00]
[C:\Program Files\Microsoft SQL Server\90\Shared\instapi.dll] [Microsoft Corporation, 2005.090.1399.00]
[C:\PROGRA~1\MICROS~2\MSSQL\BINN\SQLCTR80.DLL] [Microsoft Corporation, 2000.080.0194.00]
[C:\PROGRA~1\COMMON~1\SYSTEM\MSMAPI\2052\MSMAPI32.DLL] [Microsoft Corporation, 11.0.5601]
[C:\Program Files\Common Files\Microsoft Shared\office11\mso.dll] [Microsoft Corporation, 11.0.5606]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[D:\Program Files\Maxthon\Services\RealTime\real_time.dll] [, 1, 0, 0, 1]
[C:\PROGRA~1\COMMON~1\MICROS~1\IME\SHARED2.0\MSCAND20.DLL] [Microsoft Corporation, 9.0.5510.0]
[C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0]
[PID: 3264 / mis][E:\soft\sreng2[1].5\SREngPS.EXE] [Smallfrogs Studio, 2.5.16.900]
[C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001]
[d:\Program Files\MessengerPlus! 3\MsgPlusLoader.dll] [Patchou, 3, 63, 4, 0]
[C:\WINDOWS\system32\IMSC40A.IME] [Microsoft Corporation, 6.0.0.2527]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[E:\soft\sreng2[1].5\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15]

==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1 localhost

==================================
进程特权扫描
特殊特权被允许： SeLoadDriverPrivilege [PID = 2148, C:\PROGRAM FILES\ANALOG DEVICES\CORE\SMAX4PNP.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2156, C:\PROGRAM FILES\ANALOG DEVICES\SOUNDMAX\SMAX4.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 2516, C:\PROGRAM FILES\360SAFE\SAFEMON\360TRAY.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3784, C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2656, E:\MIS系统全\仓库管理\仓库管理(719定型)\DEPMIS.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2900, C:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\SQLMANGR.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 3416, D:\VS2005PROJECT\DATAREAD\DATAREAD\BIN\DEBUG\DATAREAD.VSHOST.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3416, D:\VS2005PROJECT\DATAREAD\DATAREAD\BIN\DEBUG\DATAREAD.VSHOST.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3244, D:\PROGRAM FILES\MAXTHON\MAXTHON.EXE]

==================================
API HOOK
N/A

==================================
隐藏进程
N/A

==================================

[/CODE]

瑞星卡卡安全论坛