无法加载或运行注册表中指定的"C:\WINDOWS\system32\207423487.vbs bbs.ikaka.com

快乐Danae - 2010-6-17 12:58:00

笔记本中了“1KB文件夹快捷方式病毒”，用1KB文件夹快捷方式病毒清除专用附件杀毒以后文件夹恢复正常，但是开机之后弹出一框框说：“Windows找不到'"C:\WINDOWS\system32\207423487.vbs"'。请确定文件名是否正确后，再试一次。要搜索文件，请单击[开始]按钮，然后单击搜索”。然后我点确定之后又弹出一框框说：无法加载或运行注册表中指定的'"C:\WINDOWS\system32\207423487.vbs"'。请确定文件是否在您的计算机上，或者删除注册表中对它的引用。
这种状况怎么处理呀？是不是还有什么病毒没清理，删除注册表对这个的引用会引起什么问题吗？

用户系统信息：Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3

我是LAJI我怕谁 - 2010-6-17 13:01:00

在注册表里搜207423487.vbs，直接删掉。应该就没有问题了。

天月来了 - 2010-6-17 14:32:00

扫描SRENG日志我看

baohe - 2010-6-17 15:17:00

病毒文件已被删除。
病毒写入的注册表项没处理。
不知什么杀软，干活干半截儿:kaka6:

天月来了 - 2010-6-17 15:54:00

有时候很多安全软件阻止不了病毒恶搞，但是会阻止工具或软件删除注册表项。

所以就会这样的结果

所以我的说明文件内指出不能让安全软件阻止程序做事，但是求助的一般不知道这些的。

尤其象360等软件或将瑞星主动防御推的高些的时候，都是会阻止清理程序做事的。

并不是程序做半截事。呵呵！！！

快乐Danae - 2010-6-17 17:24:00

完全的电脑小白……不知道怎么扫描额……

快乐Danae - 2010-6-17 17:31:00

额……原来是之前下载的那个sreng。。扫描之后保存的结果如下：
[CODE]

2010-06-17,17:29:25

System Repair Engineer 2.8.2.1321
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件
进程特权扫描
计划任务
Windows 安全更新检查
API HOOK
隐藏进程

快乐Danae - 2010-6-17 17:32:00

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Windows Publisher]
<360sd><"C:\Program Files\360\360sd\360sd.exe" /autorun> [(Verified)Qizhi Software (beijing) Co. Ltd]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><"C:\WINDOWS\system32\207423487.vbs"> [File is missing]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<AccelerometerSysTrayApplet><C:\WINDOWS\system32\AccelerometerSt.exe> [Hewlett-Packard Corporation]
<ATKHOTKEY><"C:\Program Files\ATK Hotkey\Hcontrol.exe"> [ATK0100]
<ATKMEDIA><C:\Program Files\ASUS\ATK Media\DMEDIA.EXE> [ASUSTeK Computer INC.]
<ATKOSD2><"C:\Program Files\ATKOSD2\ATKOSD2.exe"> []
<Power_Gear><C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe 1> [File is missing]
<ACMON><"C:\Program Files\ASUS\Splendid\ACMON.exe"> [ATK]
<Apoint><C:\Program Files\Apoint2K\Apoint.exe> [(Verified)Microsoft Windows Hardware Compatibility Publisher]
<SMSERIAL><C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe> [Motorola Inc.]
<ACU><"C:\Program Files\Atheros\ACU.exe" -nogui> [Atheros Communications, Inc.]
<HControl><C:\WINDOWS\ATK0100\HControl.exe> [(Verified)Microsoft Windows Hardware Compatibility Publisher]
<360Safetray><"C:\Program Files\360\360safe\safemon\360Tray.exe" /start> [(Verified)Qizhi Software (beijing) Co. Ltd]
<360Safebox><"C:\Program Files\360Safebox\SafeBoxTray.exe" /r> [(Verified)Qizhi Software (beijing) Co. Ltd]
<USBKeyTools.exe><C:\Program Files\CCBComponents\HDZB\USBKeyTools.exe> [北京华大智宝电子系统有限公司]
<NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup> [(Verified)Microsoft Windows Hardware Compatibility Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Windows Component Publisher]
<Userinit><C:\WINDOWS\system32\Userinit.exe,> [(Verified)Microsoft Windows Publisher]
<UIHost><logonui.exe> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{AEB6717E-7E19-11d0-97EE-00C04FD91972}><shell32.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
<PostBootReminder><%SystemRoot%\system32\SHELL32.dll> [(Verified)Microsoft Windows Component Publisher]
<CDBurn><%SystemRoot%\system32\SHELL32.dll> [(Verified)Microsoft Windows Component Publisher]
<WebCheck><C:\WINDOWS\system32\webcheck.dll> [(Verified)Microsoft Windows]
<SysTray><C:\WINDOWS\system32\stobject.dll> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
<WinlogonNotify: crypt32chain><crypt32.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
<WinlogonNotify: cryptnet><cryptnet.dll> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
<WinlogonNotify: cscdll><cscdll.dll> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
<WinlogonNotify: ScCertProp><wlnotify.dll> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
<WinlogonNotify: Schedule><wlnotify.dll> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
<WinlogonNotify: sclgntfy><sclgntfy.dll> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
<WinlogonNotify: SensLogn><WlNotify.dll> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
<WinlogonNotify: termsrv><wlnotify.dll> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
<WinlogonNotify: wlballoon><wlnotify.dll> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
<{438755C2-A8BA-11D1-B96B-00A0C90312E1}><%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Windows Component Publisher]
<{8C7461EF-2B13-11d2-BE35-3078302C2030}><%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}]
<Internet Explorer 版本更新><C:\WINDOWS\system32\ieudinit.exe> [(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
<Microsoft Windows Media Player><C:\WINDOWS\inf\unregmp2.exe /ShowWMP> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
<Internet Explorer><C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
<Browser Customizations><"C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS]
<浏览器自定义组件><RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
<Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
<Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
<Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
<NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
<Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
<Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp10.inf,PerUserStub> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
<通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}]
<Windows 桌面更新><regsvr32.exe /s /n /i:U shell32.dll> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}]
<Internet Explorer><C:\WINDOWS\system32\ie4uinit.exe -BaseSettings> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}]
<N/A><C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install> [Microsoft Corporation]
[HKEY_CURRENT_USER\Control Panel\Desktop]
<SCRNSAVE.EXE><C:\WINDOWS\system32\logon.scr> [(Verified)Microsoft Windows Publisher]

==================================
启动文件夹
N/A

==================================
服务
[360 杀毒实时防护服务 / 360rp][Running/Auto Start]
<"C:\Program Files\360\360sd\360rp.exe"><360.cn>
[Atheros 配置服务 / ACS][Running/Auto Start]
<C:\WINDOWS\system32\acs.exe><Atheros>
[##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## / Bonjour Service][Running/Auto Start]
<"C:\Program Files\Bonjour\mDNSResponder.exe"><Apple Computer, Inc.>
[FLEXnet Licensing Service / FLEXnet Licensing Service][Stopped/Manual Start]
<"C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe"><Macrovision Europe Ltd.>
[Human Interface Device Access / HidServ][Stopped/Disabled]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[hpqwmiex / hpqwmiex][Running/Auto Start]
<C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe><Hewlett-Packard Development Company, L.P.>
[HDZB Comm Service For V2.0 / HZ_CommSrv][Running/Auto Start]
<C:\WINDOWS\system32\HZ_CommSrv.exe><华大智宝电子系统有限公司>
[Kingsoft Basic Service / kaccore][Stopped/Manual Start]
<"C:\Program Files\Kingsoft\KAC\Service\kaccore.exe"><Kingsoft Corporation>
[Kingsoft AQ100 Service / Kingsoft AQ100 Service][Running/Auto Start]
<C:\Program Files\kingsoft\AQ100\kaqsvc.exe><Kingsoft Corporation>
[Kingsoft Antivirus XEngine Service(Beta) / KxEServBeta][Running/Auto Start]
<C:\Program Files\Common Files\Kingsoft\CommonService_Beta\kxeserv.exe><Kingsoft Corporation>
[NVIDIA Display Driver Service / NVSvc][Stopped/Auto Start]
<C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>
[Remote Packet Capture Protocol v.0 (experimental) / rpcapd][Stopped/Manual Start]
<"C:\Program Files\WinPcap\rpcapd.exe" -d -f "C:\Program Files\WinPcap\rpcapd.ini"><N/A>
[360 杀毒全盘扫描辅助服务 / scan][Stopped/Manual Start]
<C:\WINDOWS\System32\svchost.exe -k bdx-->C:\Program Files\360\360sd\Scan.dll><S.C. BitDefender S.R.L>
[Tencent Software Update Service / TSUSVC][Running/Auto Start]
<"C:\Program Files\Tencent\QQSoftMgr\1.0.302.203\TencentUpdateSvc.exe" -run><Tencent>
[XAudioService / XAudioService][Stopped/Auto Start]
<C:\WINDOWS\system32\DRIVERS\xaudio.exe><Conexant Systems, Inc.>
[主动防御 / ZhuDongFangYu][Running/Auto Start]
<"C:\Program Files\360\360safe\deepscan\zhudongfangyu.exe"><360.cn>

==================================
驱动程序
[360AntiARP / 360AntiARP][Running/System Start]
<\??\C:\WINDOWS\system32\Drivers\360AntiARP.sys><360安全中心>
[360netmon / 360netmon][Running/System Start]
<\??\C:\WINDOWS\system32\drivers\360netmon.sys><360.cn>
[360SelfProtection / 360SelfProtection][Running/System Start]
<system32\drivers\360SelfProtection.sys><360安全中心>
[Accelerometer / Accelerometer][Stopped/Manual Start]
<system32\DRIVERS\Accelerometer.sys><Hewlett-Packard Corporation>
[ADI UAA Function Driver for High Definition Audio Service / ADIHdAudAddService][Stopped/Manual Start]
<system32\drivers\ADIHdAud.sys><N/A>
[AE Audio Service / AEAudio][Stopped/Manual Start]
<system32\drivers\AEAudio.sys><N/A>
[Agere Systems Soft Modem / AgereSoftModem][Stopped/Manual Start]
<system32\DRIVERS\AGRSM.sys><N/A>
[AliIde / AliIde][Stopped/Boot Start]
<\SystemRoot\System32\DRIVERS\aliide.sys><N/A>
[AMD Processor Driver / AmdK8][Running/System Start]
<system32\DRIVERS\AmdK8.sys><Advanced Micro Devices>
[AMD Low Level Device Driver / AmdLLD][Running/Manual Start]
<system32\DRIVERS\AmdLLD.sys><AMD, Inc.>
[Alps Pointing-device Filter Driver / ApfiltrService][Running/Manual Start]
<system32\DRIVERS\Apfiltr.sys><Alps Electric Co., Ltd.>
[Atheros Wireless Network Adapter Service / AR5211][Stopped/Manual Start]
<system32\DRIVERS\ar5211.sys><Atheros Communications, Inc.>
[ASNDIS5 Protocol Driver / ASNDIS5][Stopped/Manual Start]
<\??\C:\WINDOWS\system32\ASNDIS5.SYS><Printing Communications Assoc., Inc. (PCAUSA)>
[AuthenTec TruePrint USB Driver (SwipeSensor) / ATSWPDRV][Stopped/Manual Start]
<system32\DRIVERS\ATSwpDrv.sys><AuthenTec, Inc.>
[Broadcom NetLink Gigabit Ethernet / b57w2k][Stopped/Manual Start]
<system32\DRIVERS\b57xp32.sys><Broadcom Corporation>
[BAPIDRV / BAPIDRV][Running/System Start]
<\??\C:\WINDOWS\system32\drivers\BAPIDRV.SYS><360.cn>
[Broadcom 802.11 网络适配器驱动程序 / BCM43XX][Stopped/Manual Start]
<system32\DRIVERS\bcmwl5.sys><Broadcom Corporation>
[bdfsfltr / bdfsfltr][Running/System Start]
<system32\DRIVERS\bdfsfltr.sys><BitDefender S.R.L. Bucharest, ROMANIA>
[CmdIde / CmdIde][Running/Boot Start]
<\SystemRoot\System32\DRIVERS\cmdide.sys><CMD Technology, Inc.>
[EfiSystemMon / EfiMon][Running/System Start]
<System32\Drivers\Efimon.sys><奇虎网>
[HBtnKey / HBtnKey][Stopped/Manual Start]
<system32\DRIVERS\cpqbttn.sys><Hewlett-Packard Development Company, L.P.>
[Microsoft 用于 High Definition Audio 服务的 UAA 功能驱动程序 / HdAudAddService][Running/Manual Start]
<system32\drivers\HdAudio.sys><Windows (R) Server 2003 DDK provider>
[Microsoft 用于 High Definition Audio 的 UAA 总线驱动程序 / HDAudBus][Running/Manual Start]
<system32\DRIVERS\HDAudBus.sys><Windows (R) Server 2003 DDK provider>
[HookPort / HookPort][Running/Boot Start]
<\SystemRoot\System32\Drivers\Hookport.sys><360安全中心>
[HP PC Card Smart Card Reader / HP24X][Stopped/Manual Start]
<system32\DRIVERS\HP24X.sys><N/A>
[HP Disk Filter Driver / hpdskflt][Running/Boot Start]
<\SystemRoot\system32\DRIVERS\hpdskflt.sys><Hewlett-Packard Corporation>
[HpqKbFilter Driver / HpqKbFiltr][Stopped/Manual Start]
<system32\DRIVERS\HpqKbFiltr.sys><Hewlett-Packard Development Company, L.P.>
[HSF_DPV / HSF_DPV][Stopped/Manual Start]
<system32\DRIVERS\HSX_DPV.sys><Conexant Systems, Inc.>
[HSXHWAZL / HSXHWAZL][Stopped/Manual Start]
<system32\DRIVERS\HSXHWAZL.sys><Conexant Systems, Inc.>
[Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Stopped/Manual Start]
<system32\drivers\RtkHDAud.sys><Realtek Semiconductor Corp.>
[Keyboard Filter / kbfiltr][Stopped/Manual Start]
<system32\DRIVERS\kbfiltr.sys><>
[mdmxsdk / mdmxsdk][Running/Auto Start]
<system32\DRIVERS\mdmxsdk.sys><Conexant>
[MegaIDE / MegaIDE][Running/Boot Start]
<\SystemRoot\System32\DRIVERS\MegaIDE.sys><LSI Logic Corporation.>
[ATK0100 ACPI UTILITY / MTsensor][Running/Manual Start]
<system32\DRIVERS\ATKACPI.sys><>
[NetGroup Packet Filter Driver / NPF][Stopped/Manual Start]
<system32\drivers\npf.sys><Politecnico di Torino>
[nv / nv][Running/Manual Start]
<system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[NVIDIA nForce Networking Controller Driver / NVENETFD][Stopped/Manual Start]
<system32\DRIVERS\NVENETFD.sys><NVIDIA Corporation>
[NVIDIA Network Bus Enumerator / nvnetbus][Stopped/Manual Start]
<system32\DRIVERS\nvnetbus.sys><NVIDIA Corporation>
[Protector / Protector][Running/System Start]
<system32\drivers\Protector.sys><www.ISRA.org.cn>
[ProtectorA / ProtectorA][Running/System Start]
<\??\C:\WINDOWS\system32\drivers\ProtectorA.sys><www.ISRA.org.cn>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
<system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Quantum DeepScanner Servers / quxxxserv][Running/System Start]
<\??\C:\WINDOWS\system32\drivers\quxxxrv.sys><360安全中心>
[qutmipc / qutmipc][Running/System Start]
<\??\C:\WINDOWS\system32\drivers\qutmipc.sys><360安全中心>
[rimmptsk / rimmptsk][Running/Auto Start]
<system32\DRIVERS\rimmptsk.sys><REDC>
[rimsptsk / rimsptsk][Running/Auto Start]
<system32\DRIVERS\rimsptsk.sys><REDC>
[Ricoh xD-Picture Card Driver / rismxdp][Running/Auto Start]
<system32\DRIVERS\rixdptsk.sys><REDC>
[Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start]
<system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
[Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver / RTLE8023xp][Stopped/Manual Start]
<system32\DRIVERS\Rtenicxp.sys><Realtek Semiconductor Corporation>
[SafeBoxKrnl / SafeBoxKrnl][Running/System Start]
<System32\Drivers\SafeBoxKrnl.sys><360安全中心>
[Secdrv / Secdrv][Stopped/Manual Start]
<system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
[smserial / smserial][Running/Manual Start]
<system32\DRIVERS\smserial.sys><Motorola Inc.>
[TCP/IP Protocol Driver / Tcpip][Running/System Start]
<system32\DRIVERS\tcpip.sys><Microsoft Corporation>
[Conexant Setup API / UIUSys][Stopped/Manual Start]
<system32\DRIVERS\UIUSYS.SYS><N/A>
[USB2.0 0.35M WebCam / usbvm321][Running/Manual Start]
<System32\Drivers\usbvm321.sys><Vimicro Corporation>
[winachsf / winachsf][Stopped/Manual Start]
<system32\DRIVERS\HSX_CNXT.sys><Conexant Systems, Inc.>
[wsimd Service / WSIMD][Running/Manual Start]
<system32\DRIVERS\wsimd.sys><Atheros Communications, Inc.>
[XAudio / XAudio][Running/Auto Start]
<system32\DRIVERS\xaudio.sys><Conexant Systems, Inc.>

快乐Danae - 2010-6-17 17:33:00

==================================
浏览器加载项
[AcroIEHlprObj Class]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, (Signed) Adobe Systems Incorporated>
[PIPI Link Helper]
{1A3440C6-F123-4CAB-84EE-C814E1AE0D8F} <C:\Program Files\pipi\JfCheck.dll, (Signed) PIPI Tech.>
[BOC ProcessProtect Class]
{776B71E2-B4CC-4C94-BC7C-09103AA690B6} <C:\WINDOWS\system32\ProcessProtection.dll, (Signed) www.ISRA.org.cn>
[Windows Live 登录帮助程序]
{9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, (Signed) Microsoft Corporation>
[ToolbarBrowserHelper Class]
{D2F8A635-8B0F-47BF-915E-6F456767A300} <C:\Program Files\Thunder NetWork\MiniThunder\ToolBarNow.dll, (Signed) 深圳市迅雷网络技术有限公司>
[]
{E0E899AB-F487-11D5-8D29-0050BA6940E3} <, >
[iTrusPTA Class]
{1E0DFFCF-27FF-4574-849B-55007349FEDA} <C:\WINDOWS\system32\aliedit\pta.dll, (Signed) >
[WUWebControl Class]
{6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, (Signed) Microsoft Corporation>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash10h.ocx, (Signed) Adobe Systems, Inc.>
[PhotoDrawEx Class]
{05F5F404-7C24-4B39-B5CC-340CEDEB9C0D} <C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.Qzone\bin\QQPhotoDrawEx\QQPhotoDrawEx.dll, (Signed) Tencent>
[AcroIEHlprObj Class]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, (Signed) Adobe Systems Incorporated>
[]
{0C7C23EF-A848-485B-873C-0ED954731014} <, >
[PIPI Link Helper]
{1A3440C6-F123-4CAB-84EE-C814E1AE0D8F} <C:\Program Files\pipi\JfCheck.dll, (Signed) PIPI Tech.>
[WWPicUploadCtrl Class]
{1D63232D-4F15-4A42-890D-EE617AA1537D} <C:\Program Files\AliWangWang\modules\1685\WWPictureUpload.dll, Alibaba software (Shanghai) Corporation>
[InstallHelper Class]
{1DABF8D5-8430-4985-9B7F-A30E53D709B3} <C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.QQMusic\bin\QQMusic\MMInstaller.dll, (Signed) Tencent>
[iTrusPTA Class]
{1E0DFFCF-27FF-4574-849B-55007349FEDA} <C:\WINDOWS\system32\aliedit\pta.dll, (Signed) >
[InfoScan Control]
{1F14548F-6975-40F1-AE24-6E2D1D449B2F} <C:\PROGRA~1\CCBCOM~1\Detector\InfoScan.dll, CCB>
[HTML Document]
{25336920-03F9-11CF-8FD0-00AA00686F13} <C:\WINDOWS\system32\mshtml.dll, (Signed) Microsoft Corporation>
[XML DOM Document]
{2933BF90-7B36-11D2-B20E-00C04F983E60} <C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation>
[DHTML Edit Control Safe for Scripting for IE5]
{2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, (Signed) Microsoft Corporation>
[DownloadManagerUI Class]
{337F7561-7A70-44E4-BF60-BBC84412C2C2} <C:\Program Files\Thunder NetWork\MiniThunder\ToolBarNow.dll, (Signed) 深圳市迅雷网络技术有限公司>
[]
{367E0A21-8601-4986-9C9A-153BF5ACA118} <, >
[SNCtrl Class]
{391E41FF-1CE1-493F-9B34-8BC53FB76A86} <C:\WINDOWS\system32\HDCCBCtrl.dll, (Signed) >
[XML Document]
{48123BC4-99D9-11D1-A6B3-00C04FD91555} <C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation>
[EditCtrl Class]
{488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\WINDOWS\system32\aliedit\aliedit.dll, (Signed) >
[QQPYChecker Class]
{5052B4D0-9DF7-45ef-88EF-F42C0EA33A43} <C:\Program Files\Tencent\QQPinyin\3.2.805.201\QQImeChecker.dll, (Signed) Tencent>
[WangWangX Class]
{5D09DD40-CDC4-4C56-B615-0D1E3B357C2B} <C:\Program Files\AliWangWang\AliIMX.dll, (Signed) Alibaba software (Shanghai) Corporation.>
[]
{6096E38F-5AC1-4391-8EC4-75DFA92FB32F} <, >
[WUWebControl Class]
{6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, (Signed) Microsoft Corporation>
[Windows Media Player]
{6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
[Windows Script Host Shell Object]
{72C24DD5-D70A-438B-8A42-98424B88AFB8} <C:\WINDOWS\system32\wshom.ocx, (Signed) Microsoft Corporation>
[BOC ProcessProtect Class]
{776B71E2-B4CC-4C94-BC7C-09103AA690B6} <C:\WINDOWS\system32\ProcessProtection.dll, (Signed) www.ISRA.org.cn>
[360SafeLive]
{87515F61-A66C-4319-A0E0-D416CB8059E3} <C:\Program Files\360\360safe\Safelive.dll, (Signed) 360.cn>
[Microsoft Web Browser]
{8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\ieframe.dll, (Signed) Microsoft Corporation>
[XML DOM 文档 5.0]
{88D969E5-F192-11D4-A65F-0040963251E5} <C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSXML5.DLL, Microsoft Corporation>
[Windows Live 登录帮助程序]
{9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, (Signed) Microsoft Corporation>
[]
{A5366673-E8CA-11D3-9CD9-0090271D075B} <, >
[SearchAssistantOC]
{B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, (Signed) N/A>
[InfosecCCBNetSign Class]
{BC96F5A4-C930-4226-ADAB-59349AE585E9} <C:\Program Files\CCBComponents\Detector\CCBNetSignCom.dll, (Signed) Infosec Technologies Co., Ltd.>
[DownloadAgent Class]
{C82C15DA-F838-4964-AF08-4709005C66E5} <C:\Program Files\Thunder NetWork\MiniThunder\ToolBarNow.dll, (Signed) 深圳市迅雷网络技术有限公司>
[QQPlayerCtrl Class]
{CD108273-D434-43E6-AA90-1469F97EB398} <C:\Program Files\Tencent\QQMusic\QzoneMusic.dll, (Signed) Tencent>
[AUDIO__X_MS_WMA Moniker Class]
{CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
[Microsoft Url Search Hook]
{CFBFAE00-17A6-11D0-99CB-00C04FD64497} <C:\WINDOWS\system32\ieframe.dll, (Signed) Microsoft Corporation>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash10h.ocx, (Signed) Adobe Systems, Inc.>
[ToolbarBrowserHelper Class]
{D2F8A635-8B0F-47BF-915E-6F456767A300} <C:\Program Files\Thunder NetWork\MiniThunder\ToolBarNow.dll, (Signed) 深圳市迅雷网络技术有限公司>
[]
{D6E814A0-E0C5-11D4-8D29-0050BA6940E3} <, >
[PlayerCtrl Class]
{E05BC2A3-9A46-4A32-80C9-023A473F5B23} <C:\Program Files\Tencent\QQMusic\QzoneMusic.dll, (Signed) Tencent>
[BOC Edit Class]
{E61E8363-041F-455C-8AD0-8A61F1D8E540} <C:\WINDOWS\system32\KeyboardProtection.dll, (Signed) www.ISRA.org.cn>
[SSOForPTLogin2 Class]
{EAAED308-7322-4B9B-965E-171933ADD473} <C:\Program Files\Common Files\Tencent\TXSSO\Bin\SSOAxCtrlForPTLogin.dll, (Signed) >
[XML HTTP Request]
{ED8C108E-4349-11D2-91A4-00C04F7969E8} <C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation>
[XML DOM Document 3.0]
{F5078F32-C551-11D3-89B9-0000F81FE221} <C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation>
[XML Document 3.0]
{F5078F40-C551-11D3-89B9-0000F81FE221} <C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation>
[XML HTTP]
{F6D90F16-9C73-11D3-B32E-00C04F990BB4} <C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation>
[webmod Class]
{FEE3C8C5-9BEA-4079-AB36-63ECABFC7392} <C:\Program Files\AliWangWang\alidcp.dll, (Signed) Alipay.com Co.,Ltd>
[上传到淘江湖相册]
<C:\Program Files\AliWangWang\AddToAlbum.htm, N/A>
[使用迷你迅雷下载]
<C:\Program Files\Thunder NetWork\MiniThunder\geturl.htm, N/A>
[分享到淘江湖]
<C:\Program Files\AliWangWang\ShareToTJH.htm, N/A>
[添加为阿里旺旺表情]
<C:\Program Files\AliWangWang\AddNewEmotion.htm, N/A>

==================================
正在运行的进程
[PID: 564 / SYSTEM][\SystemRoot\System32\smss.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 620 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 648 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.0.3935]
[PID: 692 / SYSTEM][C:\WINDOWS\system32\services.exe] [(Verified) Microsoft Corporation, 5.1.2600.3520 (xpsp_sp2_qfe.090206-1239)]
[C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 704 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 864 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 908 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
[PID: 980 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\System32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
[PID: 1100 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1112 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1192 / SYSTEM][C:\Program Files\360\360safe\deepscan\zhudongfangyu.exe] [360.cn, 3, 2, 2, 1002]
[C:\Program Files\360\360safe\SoftMgr\360SoftMgrS.dll] [奇虎网, 2, 1, 5, 1010]
[C:\Program Files\360\360safe\deepscan\CloudCom2.dll] [360.cn, 3, 2, 3, 1010]
[C:\Program Files\360\360safe\deepscan\heavygate.dll] [360.cn, 3, 6, 21, 0]
[C:\Program Files\360\360safe\deepscan\qutmload.dll] [360安全中心, 6, 5, 0, 1001]
[PID: 1376 / SYSTEM][C:\Program Files\kingsoft\AQ100\kaqsvc.exe] [Kingsoft Corporation, 2009,11,25,300]
[C:\Program Files\Common Files\Kingsoft\CommonService_Beta\kxebase.dll] [Kingsoft Corporation, 2009,09,23,61]
[C:\Program Files\Common Files\Kingsoft\CommonService_Beta\SCOM.dll] [Kingsoft Corporation, 2009,09,23,61]
[C:\Program Files\Common Files\Kingsoft\CommonService_Beta\kxecore\kxelog.dll] [Kingsoft Corporation, 2009,09,23,61]
[C:\Program Files\Common Files\Kingsoft\CommonService_Beta\kxecore\kxecore.dll] [Kingsoft Corporation, 2009,12,08,84]
[C:\Program Files\kingsoft\AQ100\jsonv6.dll] [Kingsoft Corporation, 2009,09,28,65]
[C:\Program Files\kingsoft\AQ100\kqscore.dll] [Kingsoft Corporation, 2009,11,25,300]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\kingsoft\AQ100\ksbwssp.dll] [Kingsoft Corporation, 2009,11,25,300]
[C:\Program Files\kingsoft\AQ100\ksbwdet.dll] [Kingsoft Corporation, 2009,11,25,300]
[C:\Program Files\kingsoft\AQ100\ksbwquar.dll] [N/A, ]
[C:\Program Files\kingsoft\AQ100\khandler.dll] [Kingsoft Corporation, 2009,11,03,243]
[C:\Program Files\kingsoft\AQ100\ksedetect.dll] [N/A, ]
[C:\Program Files\kingsoft\AQ100\sqlite.dll] [N/A, ]
[C:\Program Files\kingsoft\AQ100\kfic.dll] [N/A, ]
[C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
[C:\Program Files\kingsoft\AQ100\kcldrep.dll] [N/A, ]
[PID: 1472 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe] [(Verified) Microsoft Corporation, 5.1.2600.2696 (xpsp.050610-1527)]
[C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
[PID: 1568 / user][C:\WINDOWS\Explorer.EXE] [(Verified) Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_qfe.070613-1311)]
[C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.0.3935]
[C:\Program Files\360\360safe\safemon\safemon.dll] [360.cn, 6, 5, 2, 1002]
[C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll] [Adobe Systems, Inc., 7.0.0.0]
[C:\WINDOWS\system32\nvcpl.dll] [NVIDIA Corporation, 6.14.10.8464]
[C:\WINDOWS\system32\NVRSZHC.DLL] [NVIDIA Corporation, 6.14.10.8464]
[C:\WINDOWS\system32\nvshell.dll] [, ]
[C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 7.0.0.2004121400]
[C:\Program Files\Tencent\QQSoftMgr\1.0.302.203\QQSoftExt.dll] [Tencent, 1, 0, 0, 1]
[C:\Program Files\WinRAR\rarext.dll] [N/A, ]
[C:\Program Files\360\360sd\MenuEx.dll] [360.cn, 1, 1, 0, 1080]
[C:\Program Files\AliWangWang\AliIMExt.dll] [Alibaba software (Shanghai) Corporation., 1.0.0.1]
[PID: 1580 / LOCAL SERVICE][C:\WINDOWS\System32\SCardSvr.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\System32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1596 / SYSTEM][C:\WINDOWS\system32\acs.exe] [Atheros, 5.0.0.350]
[C:\WINDOWS\system32\athcfg20U.dll] [Atheros, 5.0.0.350]
[C:\WINDOWS\system32\athcfg20ResU.dll] [Atheros Communications, Inc., 5.0.0.350]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\athcfg11resloc.dll] [Atheros Communications, Inc., 5.0.0.350]
[C:\WINDOWS\system32\wsfwDS.dll] [Atheros Communications, Inc., 5.0.0.350]
[C:\WINDOWS\system32\wsimd.dll] [Atheros Communications, Inc., 5.0.0.350]
[C:\WINDOWS\system32\DSA.dll] [Devicescape, 1, 0, 634, 8]
[PID: 1660 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1948 / SYSTEM][C:\Program Files\Common Files\Kingsoft\CommonService_Beta\kxeserv.exe] [Kingsoft Corporation, 2009,11,12,82]
[C:\Program Files\Common Files\Kingsoft\CommonService_Beta\jsonv6.dll] [Kingsoft Corporation, 2009,09,28,65]
[C:\Program Files\Common Files\Kingsoft\CommonService_Beta\kxedump.dll] [Kingsoft Corporation, 2009,09,23,61]
[C:\Program Files\Common Files\Kingsoft\CommonService_Beta\scom.dll] [Kingsoft Corporation, 2009,09,23,61]
[C:\Program Files\Common Files\Kingsoft\CommonService_Beta\kxebase.dll] [Kingsoft Corporation, 2009,09,23,61]
[C:\Program Files\Common Files\Kingsoft\CommonService_Beta\kxecore\kxelog.dll] [Kingsoft Corporation, 2009,09,23,61]
[C:\Program Files\Common Files\Kingsoft\CommonService_Beta\kxecore\kxecore.dll] [Kingsoft Corporation, 2009,12,08,84]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Common Files\Kingsoft\CommonService_Beta\kxecore\kxestat.dll] [Kingsoft Corporation, 2010,01,21,452]
[PID: 204 / SYSTEM][C:\Program Files\360\360sd\360rp.exe] [360.cn, 1, 1, 0, 1201]
[C:\Program Files\360\360sd\Router.dll] [360安全中心, 1, 0, 0, 1069]
[C:\Program Files\360\360sd\QTQuart.dll] [360.cn, 1, 0, 0, 1072]
[C:\Program Files\360\360sd\BDFLTLIB.DLL] [, ]
[C:\Program Files\360\360sd\SCAN.DLL] [S.C. BitDefender S.R.L, 12, 0, 53, 0]
[C:\Program Files\360\360sd\Wrapper.dll] [360安全中心, 1, 0, 0, 1]
[C:\Program Files\360\360sd\cloudcom2.dll] [360.cn, 3, 2, 3, 1005]
[C:\Program Files\360\360sd\wlist.dll] [360安全中心, 3, 0, 0, 1004]
[C:\Program Files\360\360sd\smartscn.dll] [BitDefender S.R.L., 12.0.0.11]
[C:\Program Files\360\360sd\bapi.dll] [360.cn, 1.0.0.1010]
[C:\PROGRA~1\360\360sd\bdcore.dll] [BitDefender, 11, 0, 0, 33]
[C:\PROGRA~1\360\360sd\trufos.dll] [N/A, ]
[C:\PROGRA~1\360\360sd\avxdisk.dll] [BitDefender, 1, 0, 0, 1]
[C:\Program Files\360\360sd\heavygate.dll] [360.cn, 3, 6, 21, 0]
[C:\WINDOWS\system32\TcpIpDog0.dll] [N/A, ]
[C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
[C:\Program Files\360\360sd\CrashReport.dll] [360安全中心, 1, 0, 0, 1074]
[PID: 228 / SYSTEM][C:\Program Files\Bonjour\mDNSResponder.exe] [Apple Computer, Inc., 1,0,3,1]
[PID: 444 / SYSTEM][C:\WINDOWS\system32\HZ_CommSrv.exe] [华大智宝电子系统有限公司, 1, 2, 0, 1]

快乐Danae - 2010-6-17 17:33:00

[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 528 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 580 / SYSTEM][C:\Program Files\Tencent\QQSoftMgr\1.0.302.203\TencentUpdateSvc.exe] [Tencent, 1.0 Beta3 Build 302]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.0.3935]
[C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
[PID: 1432 / user][C:\Program Files\ATK Hotkey\Hcontrol.exe] [ATK0100, 1043, 2, 31, 83]
[C:\Program Files\ATK Hotkey\CMSSC.dll] [N/A, ]
[C:\Program Files\ATK Hotkey\inter_f2.dll] [ATK, 1043, 2, 15, 52]
[C:\Program Files\ATK Hotkey\ATKWLIOC.DLL] [ACTIONTEC Electronics,Inc, 2.01.02]
[C:\Program Files\ATK Hotkey\SiSPkt.dll] [Silicon Integrated Systems Corp., 1, 0, 0, 45]
[C:\WINDOWS\system32\vxdif.dll] [Alps Electric Co., Ltd., 6.0.3.9]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\360\360safe\safemon\safemon.dll] [360.cn, 6, 5, 2, 1002]
[C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.0.3935]
[PID: 1492 / user][C:\Program Files\ASUS\ATK Media\DMEDIA.EXE] [ASUSTeK Computer INC., 1, 16, 0, 0]
[C:\Program Files\ASUS\ATK Media\ATKMETHOD.dll] [ASUSTeK Computer Inc., 1, 16, 0, 0]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.0.3935]
[C:\Program Files\ASUS\ATK Media\CHNSTRING.dll] [N/A, ]
[PID: 1500 / user][C:\Program Files\ATKOSD2\ATKOSD2.exe] [, 6.64.1.6]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.0.3935]
[PID: 1692 / user][C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe] [ASUSTeK Computer Inc., 1043, 6, 15, 118]
[C:\Program Files\ASUS\Power4 Gear\ATKMETHOD.dll] [ASUSTeK Computer Inc., 1043, 6, 15, 118]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.0.3935]
[PID: 1728 / SYSTEM][C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe] [Hewlett-Packard Development Company, L.P., 2, 0, 1, 9]
[PID: 1716 / user][C:\Program Files\ASUS\Splendid\ACMON.exe] [ATK, 1, 0, 8, 0]
[C:\Program Files\ASUS\Splendid\OVS.dll] [ASUSTek, 1, 0, 0, 1]
[C:\Program Files\ASUS\Splendid\GLCDdll.dll] [, 1, 0, 1, 0]
[C:\Program Files\ASUS\Splendid\Chameleon.dll] [ASUSTeK, 1, 0, 0, 3]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.0.3935]
[PID: 1748 / user][C:\Program Files\Apoint2K\Apoint.exe] [Alps Electric Co., Ltd., 5.5.1.227]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Apoint2K\ApResCS.dll] [Alps Electric Co., Ltd., 5.5.1.23]
[C:\WINDOWS\system32\VXDIF.DLL] [Alps Electric Co., Ltd., 6.0.3.9]
[C:\Program Files\Apoint2K\Apoint.DLL] [Alps Electric Co., Ltd., 5.5.1.346]
[C:\Program Files\Apoint2K\EzAuto.dll] [Alps Electric Co., Ltd., 5.5.1.86]
[C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.0.3935]
[C:\Program Files\Apoint2K\EzLaunch.DLL] [Alps Electric Co., Ltd., 5.5.1.79]
[PID: 1672 / user][C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe] [Motorola Inc., 6.12.05]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Motorola\SMSERIAL\sm56eng.dll] [Motorola Inc., 6.12.05]
[C:\Program Files\Motorola\SMSERIAL\sm56fra.dll] [, ]
[C:\Program Files\Motorola\SMSERIAL\sm56brz.dll] [, ]
[C:\Program Files\Motorola\SMSERIAL\sm56chs.dll] [, ]
[C:\Program Files\Motorola\SMSERIAL\sm56cht.dll] [, ]
[C:\Program Files\Motorola\SMSERIAL\sm56ger.dll] [, ]
[C:\Program Files\Motorola\SMSERIAL\sm56ita.dll] [, ]
[C:\Program Files\Motorola\SMSERIAL\sm56jpn.dll] [, ]
[C:\Program Files\Motorola\SMSERIAL\sm56esp.dll] [, ]
[C:\Program Files\Motorola\SMSERIAL\sm56kor.dll] [, ]
[C:\Program Files\Motorola\SMSERIAL\sm56dnk.dll] [, ]
[C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.0.3935]
[PID: 1772 / user][C:\Program Files\Atheros\ACU.exe] [Atheros Communications, Inc., 5.0.0.350]
[C:\WINDOWS\system32\wcapiU.dll] [Atheros, 5.0.0.350]
[C:\WINDOWS\system32\athcfg20U.dll] [Atheros, 5.0.0.350]
[C:\WINDOWS\system32\wgapi.dll] [Atheros, 5.0.0.350]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.0.3935]
[C:\WINDOWS\system32\wgapiloc.dll] [Atheros, 5.0.0.350]
[C:\Program Files\Atheros\ACUloc.dll] [Atheros Communications, Inc., 5.0.0.350]
[C:\Program Files\Atheros\oemresloc.dll] [Atheros Communications, Inc., 5.0.0.350]
[PID: 1816 / user][C:\Program Files\360\360safe\safemon\360Tray.exe] [360.CN, 7, 0, 0, 1009]
[C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.0.3935]
[C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\360\360safe\ipc\ipcservice.dll] [360.CN, 6, 5, 2, 1002]
[C:\Program Files\360\360safe\ipc\fileMgr.dll] [360.cn, 6, 5, 2, 1002]
[C:\Program Files\360\360safe\ipc\yhregd.dll] [, 6, 5, 0, 1002]
[C:\Program Files\360\360safe\ipc\appd.dll] [360.cn, 6, 5, 1, 1006]
[C:\Program Files\360\360safe\safemon\360compro.dll] [360安全中心, 6, 2, 0, 1003]
[C:\Program Files\360\360safe\safemon\360webpro.dll] [360.CN, 1, 3, 0, 1031]
[C:\Program Files\360\360safe\safemon\360traylive.dll] [360安全中心, 6, 0, 1, 1013]
[C:\Program Files\360\360safe\safemon\360procmon.dll] [360.CN, 6, 5, 2, 1006]
[C:\Program Files\360\360safe\safemon\SelfProtectAPI2.dll] [360.CN, 1, 1, 0, 1012]
[C:\Program Files\360\360safe\safemon\360safemonpro.tpi] [360.cn, 1, 1, 2, 1001]
[C:\Program Files\360\360safe\safemon\netm.tpi] [360.cn, 1, 0, 1, 1012]
[C:\Program Files\360\360safe\safemon\netmon.tpi] [360.CN, 1, 0, 2, 1011]
[C:\Program Files\360\360safe\deepscan\qutmload.dll] [360安全中心, 6, 5, 0, 1001]
[C:\WINDOWS\system32\TcpIpDog0.dll] [N/A, ]
[C:\Program Files\360\360safe\ipc\qutmipc.dll] [360安全中心, 6, 2, 0, 1007]
[C:\Program Files\360\360safe\safemon\safemon.dll] [360.cn, 6, 5, 2, 1002]
[C:\Program Files\360\360safe\safemon\urlproc.dll] [360.cn, 1, 2, 1, 1005]
[C:\Program Files\360\360safe\safemon\urlprocnet.dll] [360.cn, 1, 2, 1, 1008]
[C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
[C:\Program Files\360\360safe\SafeLive.dll] [360.cn, 1, 0, 0, 1007]
[C:\Program Files\360\360safe\pdown.dll] [360.cn, 1, 2, 0, 1014]
[C:\Program Files\360\360safe\360ver.dll] [奇虎网, 7, 1, 0, 1010]
[C:\Program Files\360\360safe\netmon\360netctrl.dll] [360.CN, 1, 0, 3, 1009]
[C:\Program Files\360\360safe\ipc\PatchCheck.dll] [360.cn, 1, 0, 0, 1005]
[C:\Program Files\360\360safe\efiproc.dll] [奇虎360安全卫士, 1, 0, 0, 1005]
[C:\Program Files\360\360safe\deepscan\Cloudcom2.dll] [360.cn, 3, 2, 3, 1010]
[C:\Program Files\360\360safe\deepscan\heavygate.dll] [360.cn, 3, 6, 21, 0]
[C:\Program Files\360\360safe\LiveUpd360.dll] [360.cn, 1, 2, 0, 1033]
[C:\Program Files\360\360safe\360net.dll] [奇虎网, 1, 1, 16, 1019]
[C:\Program Files\360\360safe\360P2SP.dll] [360.cn, 1, 1, 0, 1045]
[C:\Program Files\360\360safe\deepscan\Bapi.dll] [360.cn, 1.0.0.1010]
[PID: 2068 / user][C:\WINDOWS\system32\ACEngSvr.exe] [ASUSTeK, 1, 0, 0, 4]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\icm32.dll] [Microsoft Corporation, 5.1.2600.2709 (xpsp.050628-1523)]
[PID: 2100 / user][C:\Program Files\Apoint2K\HidFind.exe] [Alps Electric Co., Ltd., 1.1.0.23]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.0.3935]
[PID: 2136 / user][C:\Program Files\Apoint2K\Apntex.exe] [Alps Electric Co., Ltd., 5.5.1.23]
[C:\WINDOWS\system32\VXDIF.DLL] [Alps Electric Co., Ltd., 6.0.3.9]
[C:\Program Files\Apoint2K\Apoint.DLL] [Alps Electric Co., Ltd., 5.5.1.346]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.0.3935]
[PID: 2148 / user][C:\Program Files\360Safebox\SafeBoxTray.exe] [360.cn, 3, 2, 0, 1003]
[C:\Program Files\360Safebox\QHEngine.dll] [360.cn, 2, 1, 1, 1002]
[C:\Program Files\360Safebox\cloudsec2.dll] [360.cn, 3, 2, 3, 1005]
[C:\Program Files\360Safebox\safeboxapi.dll] [360.cn, 2, 3, 0, 1003]
[C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.0.3935]
[C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\360Safebox\SafeLive.dll] [, 1, 0, 0, 1006]
[C:\Program Files\360Safebox\pdown.dll] [360.cn, 1, 2, 0, 1012]
[C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
[C:\WINDOWS\system32\TcpIpDog0.dll] [N/A, ]
[PID: 2160 / user][C:\Program Files\CCBComponents\HDZB\USBKeyTools.exe] [北京华大智宝电子系统有限公司, 1, 6, 0, 30]
[C:\WINDOWS\system32\ccb_hdcsp.dll] [CIDC, 1, 4, 3, 42]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.0.3935]
[C:\Program Files\360\360safe\safemon\safemon.dll] [360.cn, 6, 5, 2, 1002]
[PID: 2244 / user][C:\WINDOWS\system32\ctfmon.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.0.3935]
[PID: 2240 / user][C:\WINDOWS\system32\conime.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.0.3935]
[PID: 2268 / user][C:\Program Files\Apoint2K\Apvfb.exe] [ALPS, 5.5.3.11]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.0.3935]
[C:\Program Files\360\360safe\safemon\safemon.dll] [360.cn, 6, 5, 2, 1002]
[PID: 2312 / user][C:\Program Files\360\360sd\360sd.exe] [360.cn, 1, 1, 0, 1201]
[C:\Program Files\360\360sd\QTQuart.dll] [360.cn, 1, 0, 0, 1072]
[C:\Program Files\360\360sd\OLEPRO32.DLL] [Microsoft Corporation, 5.1.2600.5512]
[C:\Program Files\360\360sd\CrashReport.dll] [360安全中心, 1, 0, 0, 1074]
[C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.0.3935]
[C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
[C:\WINDOWS\system32\TcpIpDog0.dll] [N/A, ]
[PID: 3140 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\System32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\TcpIpDog0.dll] [N/A, ]
[PID: 3572 / user][C:\Program Files\ATK Hotkey\ATKOSD.exe] [, 1043, 2, 15, 82]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\360\360safe\safemon\safemon.dll] [360.cn, 6, 5, 2, 1002]
[C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.0.3935]
[PID: 3616 / user][C:\Program Files\360\360safe\LiveUpdate360.exe] [360.cn, 1, 2, 0, 1020]
[C:\Program Files\360\360safe\LiveUpd360.dll] [360.cn, 1, 2, 0, 1033]
[C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.0.3935]
[C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\TcpIpDog0.dll] [N/A, ]
[C:\Program Files\360\360safe\360net.dll] [奇虎网, 1, 1, 16, 1019]
[C:\Program Files\360\360safe\360P2SP.dll] [360.cn, 1, 1, 0, 1045]
[C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
[PID: 3804 / user][C:\Program Files\ATK Hotkey\WDC.exe] [, 1, 0, 0, 8]

快乐Danae - 2010-6-17 17:33:00

[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\360\360safe\safemon\safemon.dll] [360.cn, 6, 5, 2, 1002]
[C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.0.3935]
[PID: 3852 / user][D:\Program Files\Dr.COM宽带认证客户端\ishare_user.exe] [N/A, ]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\360\360safe\safemon\safemon.dll] [360.cn, 6, 5, 2, 1002]
[C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.0.3935]
[C:\WINDOWS\system32\TcpIpDog0.dll] [N/A, ]
[C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
[PID: 3952 / user][C:\Program Files\Mozilla Firefox\firefox.exe] [Mozilla Corporation, 1.9.2.3]
[C:\Program Files\Mozilla Firefox\xul.dll] [Mozilla Foundation, 1.9.2.3]
[C:\Program Files\Mozilla Firefox\sqlite3.dll] [sqlite.org, 3.6.16.1]
[C:\Program Files\Mozilla Firefox\MOZCRT19.dll] [Mozilla Foundation, 8.00.0000]
[C:\Program Files\Mozilla Firefox\js3250.dll] [N/A, ]
[C:\Program Files\Mozilla Firefox\nspr4.dll] [Mozilla Foundation, 4.8.3]
[C:\Program Files\Mozilla Firefox\smime3.dll] [Mozilla Foundation, 3.12.6.2 Basic ECC]
[C:\Program Files\Mozilla Firefox\nss3.dll] [Mozilla Foundation, 3.12.6.2 Basic ECC]
[C:\Program Files\Mozilla Firefox\nssutil3.dll] [Mozilla Foundation, 3.12.6.2]
[C:\Program Files\Mozilla Firefox\plc4.dll] [Mozilla Foundation, 4.8.3]
[C:\Program Files\Mozilla Firefox\plds4.dll] [Mozilla Foundation, 4.8.3]
[C:\Program Files\Mozilla Firefox\ssl3.dll] [Mozilla Foundation, 3.12.6.2 Basic ECC]
[C:\Program Files\Mozilla Firefox\xpcom.dll] [Mozilla Foundation, 1.9.2.3]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\360\360safe\safemon\safemon.dll] [360.cn, 6, 5, 2, 1002]
[C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.0.3935]
[C:\Program Files\Mozilla Firefox\components\browserdirprovider.dll] [Mozilla Foundation, 1.9.2.3]
[C:\WINDOWS\system32\TcpIpDog0.dll] [N/A, ]
[C:\Program Files\Mozilla Firefox\components\brwsrcmp.dll] [Mozilla Foundation, 1.9.2.3]
[C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
[C:\Program Files\Mozilla Firefox\softokn3.dll] [Mozilla Foundation, 3.12.4.6 Basic ECC]
[C:\Program Files\Mozilla Firefox\nssdbm3.dll] [Mozilla Foundation, 3.12.4.6 Basic ECC]
[C:\Program Files\Mozilla Firefox\freebl3.dll] [Mozilla Foundation, 3.12.4.6 Basic ECC]
[C:\Program Files\Mozilla Firefox\nssckbi.dll] [Mozilla Foundation, 1.78]
[C:\Program Files\360\360safe\safemon\LoadWDUI.dll] [360.cn, 1, 0, 0, 1018]
[C:\Program Files\360\360safe\safemon\urlproc.dll] [360.cn, 1, 2, 1, 1005]
[C:\Program Files\360\360safe\safemon\urlprocnet.dll] [360.cn, 1, 2, 1, 1008]
[C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll] [, ]
[C:\Program Files\pipi\JfCheck.dll] [PIPI Tech., 1, 5, 0, 1]
[PID: 3976 / user][C:\Program Files\Internet Explorer\IEXPLORE.EXE] [Microsoft Corporation, 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\360\360safe\safemon\safemon.dll] [360.cn, 6, 5, 2, 1002]
[C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
[C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.0.3935]
[C:\Program Files\360\360safe\safemon\LoadWDUI.dll] [360.cn, 1, 0, 0, 1018]
[C:\Program Files\pipi\JfCheck.dll] [PIPI Tech., 1, 5, 0, 1]
[PID: 272 / user][C:\Program Files\Internet Explorer\IEXPLORE.EXE] [Microsoft Corporation, 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\360\360safe\safemon\safemon.dll] [360.cn, 6, 5, 2, 1002]
[C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.0.3935]
[C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 7.0.0.2004121400]
[C:\Program Files\pipi\JfCheck.dll] [PIPI Tech., 1, 5, 0, 1]
[C:\WINDOWS\system32\ProcessProtection.dll] [www.ISRA.org.cn, 1, 3, 10, 26]
[C:\Program Files\Thunder NetWork\MiniThunder\ToolBarNow.dll] [深圳市迅雷网络技术有限公司, 3,1,1,58]
[C:\Program Files\Thunder NetWork\MiniThunder\ATL71.DLL] [Microsoft Corporation, 7.10.6101.0]
[C:\Program Files\Thunder NetWork\MiniThunder\MSVCP71.dll] [Microsoft Corporation, 7.10.6030.0]
[C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
[C:\Program Files\360\360safe\safemon\urlproc.dll] [360.cn, 1, 2, 1, 1005]
[C:\Program Files\360\360safe\safemon\urlprocnet.dll] [360.cn, 1, 2, 1, 1008]
[C:\WINDOWS\system32\TcpIpDog0.dll] [N/A, ]
[C:\WINDOWS\system32\Macromed\Flash\Flash10h.ocx] [Adobe Systems, Inc., 10,1,53,38]
[PID: 3504 / user][C:\Documents and Settings\user\My Documents\下载\sreng2\SREngLdr.EXE] [Smallfrogs Studio, 2.8.2.1321]
[PID: 508 / user][C:\Documents and Settings\user\My Documents\下载\sreng2\SRE2d9b9717.EXE] [Smallfrogs Studio, 2.8.2.1321]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\360\360safe\safemon\safemon.dll] [360.cn, 6, 5, 2, 1002]
[C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.0.3935]
[C:\Documents and Settings\user\My Documents\下载\sreng2\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15]
[C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
[C:\WINDOWS\system32\TcpIpDog0.dll] [N/A, ]

==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
MSAFD Tcpip [TCP/IP]
C:\WINDOWS\system32\TcpIpDog0.dll(, N/A)
MSAFD Tcpip [UDP/IP]
C:\WINDOWS\system32\TcpIpDog0.dll(, N/A)
MSAFD Tcpip [RAW/IP]
C:\WINDOWS\system32\TcpIpDog0.dll(, N/A)
RSVP UDP Service Provider
C:\WINDOWS\system32\TcpIpDogR0.dll(, N/A)
RSVP TCP Service Provider
C:\WINDOWS\system32\TcpIpDogR0.dll(, N/A)

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1 localhost

==================================
进程特权扫描
特殊特权被允许： SeLoadDriverPrivilege [PID = 1596, C:\WINDOWS\SYSTEM32\ACS.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1432, C:\PROGRAM FILES\ATK HOTKEY\HCONTROL.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1492, C:\PROGRAM FILES\ASUS\ATK MEDIA\DMEDIA.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1500, C:\PROGRAM FILES\ATKOSD2\ATKOSD2.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1692, C:\PROGRAM FILES\ASUS\POWER4 GEAR\BATTERYLIFE.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1716, C:\PROGRAM FILES\ASUS\SPLENDID\ACMON.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1672, C:\PROGRAM FILES\MOTOROLA\SMSERIAL\SM56HLPR.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1772, C:\PROGRAM FILES\ATHEROS\ACU.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2068, C:\WINDOWS\SYSTEM32\ACENGSVR.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2160, C:\PROGRAM FILES\CCBCOMPONENTS\HDZB\USBKEYTOOLS.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3572, C:\PROGRAM FILES\ATK HOTKEY\ATKOSD.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3804, C:\PROGRAM FILES\ATK HOTKEY\WDC.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3852, D:\PROGRAM FILES\DR.COM宽带认证客户端\ISHARE_USER.EXE]

==================================
计划任务
[已启用] SogouImeMgr.job
C:\PROGRA~1\SOGOUI~1\500~1.393\SGTool.exe
[已启用] User_Feed_Synchronization-{D2704296-F6E1-42BD-B747-D5DAD0271C08}.job
C:\WINDOWS\system32\msfeedssync.exe

==================================
Windows 安全更新检查
N/A

==================================
API HOOK
N/A

==================================
隐藏进程
N/A

==================================

[/CODE]

快乐Danae - 2010-6-17 17:34:00

长度太长了，分几次回复的……
请帮帮忙吧~~~谢谢了~~！！！！！！！！！

天月来了 - 2010-6-17 17:37:00

你知道长度长，怎就不知道点吉我这贴右下角的引用，以附件形式发贴呢？？

瑞星这破论坛，以及全国所有破论坛都这毛病

正常回帖窗口内没有上传附件的操作。唉

日志看不了

天月来了 - 2010-6-17 17:38:00

在扫日志的SRENG工具》启动项目》注册表》里将<load>项目置空（就是选择“编辑”）这必须关闭杀毒软件的监控，否则改不了可能。
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><"C:\WINDOWS\system32\smss.exe:2075451338.vbs"> [File is missing]

就是将 <load> 的“值”项编辑置空,清空值的所有内容即可

快乐Danae - 2010-6-17 18:09:00

问题解决了。谢谢天月，人太好了~
Thank you so much！

瑞星卡卡安全论坛