瑞星卡卡安全论坛

在使用电脑过程中，突然出现读取光驱的声音，然后提示XX（XX显示为乱码样）驱动程序已安装，可使用，详情请点击 右下角一图标，点开过后，出现如下界面：
【原图在附件里，这里列出文字】
--框标题为：驱动程序软件安装-------
W$已安装
成功地安装了这个设备的软件。
W$ 可以使用
---------------------------------------------

按照提示的“W$已安装”，在注册表中搜索 “W$”，能搜到如下信息：
\HKEY_LOCAL_MACHINE\HARDWARE\DEVICEMAP\SCCI\Scci\Scci Port0\Scci Bus0\Target Id1\Logical Unit Id0 下有个叫Identifier的值为 W$



系统为vista，请帮忙看看是怎么回事
【图片上传总提示为无效文件，打成了rar包】
这是第二次出现这种情况了，上一次可惜没有抓下图来。上次发生后用瑞星杀毒，没有发现病毒。

用户系统信息：Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; Trident/4.0; QQDownload 627; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Maxthon 2.0)

附件: 20100721安装驱动 2.rar

Vista好像确实有个自动安装驱动的功能。但是看不出这个装的是什么驱动。如果是从驱动盘里面装的驱动应该问题不大。还是建议楼主用System Repair Engineer智能扫描之后上传日志供大家分析一下有没有什么恶意程序

这问题还真不好说，你那光盘里有什么？

我光驱里是空的，但每次都有读光驱的声音。我会用2楼moc说的工具扫描一下。

System Repair Engineer智能扫描的报告来了。没看到怎么上传附件。只好贴在这里了，太长，我要分几次贴。

[CODE]

2010-07-21,16:34:50

System Repair Engineer 2.8.2.1321
Smallfrogs (http://www.KZTechs.com)

Windows Vista Home Basic Edition Service Pack 2 (Build 6002) - 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件
    进程特权扫描
    计划任务
    Windows 安全更新检查
    API HOOK
    隐藏进程


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <Sidebar><C:\Program Files\Windows Sidebar\sidebar.exe /autoRun>  [(Verified)Microsoft Windows]
    <PPAP><"C:\Program Files\Common Files\PPLiveNetwork\PPAP.exe" -background>  [(Verified)PPLive Corporation]
    <WMPNSCFG><C:\Program Files\Windows Media Player\WMPNSCFG.exe>  [(Verified)Microsoft Windows]
    <msnmsgr><; "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background>  [(Verified)Microsoft Corporation]
    <Google Update><; "C:\Users\Rita\AppData\Local\Google\Update\GoogleUpdate.exe" /c>  [(Verified)Google Inc]
    <aliim><; C:\Program Files\AliWangWang\aliim.exe>  [(Verified)Alisoft(Shanghai) Co., Ltd.]
    <Lingoes><; C:\Program Files\Lingoes\Translator2\Lingoes.exe -minimize>  [Lingoes Project]
    <QQDownload><; "C:\Program Files\Tencent\QQDownload\QQDownload.exe" autostart>  [File is missing]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <Windows Defender><%ProgramFiles%\Windows Defender\MSASCui.exe -hide>  [(Verified)Microsoft Windows]
    <TpShocks><TpShocks.exe>  [(Verified)Lenovo(Japan)Ltd.]
    <IgfxTray><C:\Windows\system32\igfxtray.exe>  [(Verified)Intel Corporation]
    <HotKeysCmds><C:\Windows\system32\hkcmd.exe>  [(Verified)Intel Corporation]
    <Persistence><C:\Windows\system32\igfxpers.exe>  [(Verified)Intel Corporation]
    <TVT Scheduler Proxy><C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe>  [Lenovo Group Limited]
    <RoxioDragToDisc><"C:\Program Files\Lenovo\Drag-to-Disc\DrgToDsc.exe">  [(Verified)Sonic Solutions]
    <LPManager><C:\PROGRA~1\Lenovo\LENOVO~2\LPMGR.exe>  [(Verified)Lenovo(Japan)Ltd.]
    <LPMailChecker><C:\PROGRA~1\Lenovo\LENOVO~2\LPMLCHK.exe>  [(Verified)Lenovo(Japan)Ltd.]
    <CameraApplicationLauncher><C:\Program Files\Lenovo\Camera Center\bin\CameraApplicationLaunchpadLauncher.exe>  []
    <PWMTRV><rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWMTR32V.DLL,PwrMgrBkGndMonitor>  [(Verified)Lenovo(Japan)Ltd.]
    <ACTray><C:\Program Files\ThinkPad\ConnectUtilities\ACTray.exe>  [(Verified)Lenovo(Japan)Ltd.]
    <ACWlIcon><C:\Program Files\ThinkPad\ConnectUtilities\ACWlIcon.exe>  [(Verified)Lenovo(Japan)Ltd.]
    <cssauth><"C:\Program Files\Lenovo\Client Security Solution\cssauth.exe" silent>  [File is missing]
    <Windows Mobile-based device management><%windir%\WindowsMobile\wmdSync.exe>  [(Verified)Microsoft Windows]
    <RavTray><"C:\Program Files\Rising\Rav\RsTray.exe" -system>  [(Verified)Beijing Rising Information Technology Corporation Limited]
    <Adobe Reader Speed Launcher><; "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe">  [(Verified)Adobe Systems, Incorporated]
    <AMSG><; C:\Program Files\ThinkVantage\AMSG\Amsg.exe /startup>  [(Verified)Lenovo (Japan) Ltd.]
    <BLOG><; rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\BTVLogEx.DLL,StartBattLog>  [(Verified)Lenovo (Japan) Ltd.]
    <CCBCertificate><; C:\Program Files\CCBComponents\DMWZ\CCBCertificate.exe>  []
    <CMB webProtect><; C:\Program Files\CMBCHINA\WebProtect\WPService.exe  /alone>  [(Verified)China Merchants Bank]
    <CreateLMBCShortCut><; "C:\Program Files\Lenovo\Mobile Broadband Connect\UserShortcutCreator.exe">  []
    <EZEJMNAP><; C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe>  [(Verified)Lenovo(Japan)Ltd.]
    <Microsoft Pinyin IME Migration><; C:\PROGRA~1\COMMON~1\MICROS~1\IME12\IMESC\IMSCMIG.EXE /INSTALL>  [(Verified)Microsoft Corporation]
    <RoxWatchTray><; "C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatchTray10.exe">  [(Verified)Sonic Solutions]
    <Stormtray><; C:\Program Files\StormII\Stormtray.exe /Start>  [(Verified)北京暴风网际]
    <SunJavaUpdateSched><; "C:\Program Files\Java\jre6\bin\jusched.exe">  [(Verified)Sun Microsystems, Inc.]
    <TPFNF7><; C:\Program Files\Lenovo\NPDIRECT\TPFNF7SP.exe /r>  [(Verified)Lenovo(Japan)Ltd.]
    <TPHOTKEY><; C:\Program Files\Lenovo\HOTKEY\LVOSDSVC.exe>  [(Verified)Lenovo(Japan)Ltd.]
    <USBKeyTools.exe><; C:\Program Files\CCBComponents\HDZB\USBKeyTools.exe>  [北京华大智宝电子系统有限公司]
    <wdcertm_ccb><; C:\Windows\system32\WatchData\Watchdata CCB CSP v3.2\WDCertM_CCB.exe>  [ Beijing WatchData System Co., Ltd.]
    <WebThunder><; C:\Program Files\Thunder Network\WebThunder\WebThunder.exe>  [(Verified)ShenZhen Thunder Networking Technologies Ltd.]
    <zrht><; c:\windows\yhcz.exe>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><explorer.exe>  [(Verified)Microsoft Windows]
    <Userinit><C:\Windows\system32\userinit.exe,>  [(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    <WebCheck><C:\Windows\System32\webcheck.dll>  [(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
    <WinlogonNotify: igfxcui><igfxdev.dll>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
    <{8C7461EF-2B13-11d2-BE35-3078302C2030}><%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
    <Microsoft Windows Media Player><C:\Windows\system32\unregmp2.exe /ShowWMP>  [(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
    <Internet Explorer><C:\Windows\system32\ie4uinit.exe -UserIconConfig>  [(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
    <Browser Customizations><"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP>  [(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
    <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
    <Microsoft Windows Mail 7><"%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
    <Microsoft Windows Media Player><%SystemRoot%\system32\unregmp2.exe /FirstLogon /Shortcuts /RegBrowsers /ResetMUI>  [(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}]
    <Windows Desktop Update><regsvr32.exe /s /n /i:U shell32.dll>  [(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}]
    <Internet Explorer><C:\Windows\system32\ie4uinit.exe -BaseSettings>  [(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}]
    <N/A><C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install>  [(Verified)Microsoft Corporation]
[HKEY_CURRENT_USER\Control Panel\Desktop]
    <SCRNSAVE.EXE><C:\Windows\system32\PhotoScreensaver.scr>  [(Verified)Microsoft Windows]

==================================
启动文件夹
N/A

==================================
服务
[Ac Profile Manager Service / AcPrfMgrSvc][Running/Auto Start]
  <C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe><Lenovo>
[Access Connections Main Service / AcSvc][Running/Auto Start]
  <C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe><Lenovo>
[Alps Application Launcher Service / ApRunSvc][Running/Auto Start]
  <C:\Program Files\Apoint2K\ApRunSvc.exe><N/A>
[ASLDR Service / ASLDRService][Running/Auto Start]
  <C:\Program Files\Lenovo\ATK Hotkey\ASLDRSrv.exe><>
[ATKGFNEX Service / ATKGFNEXSrv][Running/Auto Start]
  <C:\Program Files\Lenovo\ATK Hotkey\GFNEXSrv.exe><>
[Bluetooth Service / btwdins][Running/Auto Start]
  <C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe><Broadcom Corporation.>
[drvsvc / drvsvc][Running/Auto Start]
  <C:\Windows\System32\svchost.exe -k DrvSvcGroup-->C:\Program Files\Walker\DrvInst\Bin\DrvSvc.dll><北京易软健计算机技术有限公司>
[HDZB Comm Service For V2.0 / HZ_CommSrv][Running/Auto Start]
  <C:\Windows\system32\HZ_CommSrv.exe><华大智宝电子系统有限公司>
[ThinkPad PM Service for SL Series / IBMPMSVC][Running/Auto Start]
  <C:\Windows\system32\ibmpmsvc.exe><Lenovo>
[InstallDriver Table Manager / IDriverT][Stopped/Manual Start]
  <"C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe"><Macrovision Corporation>
[IviRegMgr / IviRegMgr][Running/Auto Start]
  <C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe><InterVideo>
[Kingsoft Antivirus WebShield Service / Kingsoft Antivirus WebShield Service][Running/Auto Start]
  <C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\KSWebShield.exe><Kingsoft Corporation>
[Service of LFKA / LFKAS][Running/Auto Start]
  <C:\Program Files\Lenovo\ATK Hotkey\LFKAS.exe><>
[Power Manager DBC Service / Power Manager DBC Service][Running/Auto Start]
  <"C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE"><Lenovo>
[Roxio UPnP Renderer 10 / Roxio UPnP Renderer 10][Stopped/Manual Start]
  <"C:\Program Files\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe"><Sonic Solutions>
[Roxio Upnp Server 10 / Roxio Upnp Server 10][Stopped/Auto Start]
  <"C:\Program Files\Roxio\Digital Home 10\RoxioUpnpService10.exe"><Sonic Solutions>
[LiveShare P2P Server 10 / RoxLiveShare10][Stopped/Auto Start]
  <"C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxLiveShare10.exe"><Sonic Solutions>
[RoxMediaDB10 / RoxMediaDB10][Stopped/Manual Start]
  <"C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe"><Sonic Solutions>
[Roxio Hard Drive Watcher 10 / RoxWatch10][Stopped/Auto Start]
  <"C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatch10.exe"><Sonic Solutions>
[Rav Service / RsRavMon][Running/Auto Start]
  <"C:\Program Files\Rising\Rav\RavMonD.exe"><Beijing Rising Information Technology Co., Ltd.>
[SessionLauncher / SessionLauncher][Stopped/Auto Start]
  <C:\Users\ADMINI~1\AppData\Local\Temp\DX9\SessionLauncher.exe><(File is missing)>
[stllssvr / stllssvr][Stopped/Manual Start]
  <"C:\Program Files\Common Files\SureThing Shared\stllssvr.exe"><MicroVision Development, Inc.>
[System Update / SUService][Running/Auto Start]
  <"c:\Program Files\Lenovo\System Update\SUService.exe"><Lenovo Group Limited>
[ThinkVantage Registry Monitor Service / ThinkVantage Registry Monitor Service][Running/Auto Start]
  <"c:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe"><Lenovo Group Limited>
[ThinkPad HDD APS Logging Service / TPHDEXLGSVC][Running/Auto Start]
  <System32\TPHDEXLG.exe><(File is missing)>
[On Screen Display / TPHKSVC][Running/Auto Start]
  <C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe><Lenovo Group Limited>
[TSS Core Service / TSSCoreService][Running/Auto Start]
  <"C:\Program Files\Lenovo\Client Security Solution\tvttcsd.exe"><Lenovo>
[TVT Backup Protection Service / TVT Backup Protection Service][Running/Auto Start]
  <"C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe"><>
[TVT Backup Service / TVT Backup Service][Running/Auto Start]
  <"C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe"><Lenovo Group Limited>
[TVT Scheduler / TVT Scheduler][Running/Auto Start]
  <"c:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe"><Lenovo Group Limited>
[TVT Windows Update Monitor / TVT_UpdateMonitor][Stopped/Auto Start]
  <C:\Program Files\Lenovo\Rescue and Recovery\UpdateMonitor.exe><Lenovo Group Limited>
[WatchData ccb V3.2 / WDMonitorCCB][Running/Auto Start]
  <C:\Windows\system32\WatchData\Watchdata CCB CSP v3.2\WDKeyMonitorCCB.exe><Beijing WatchData System Co., Ltd.>
[XAudioService / XAudioService][Running/Auto Start]
  <C:\Windows\system32\DRIVERS\xaudio.exe><Conexant Systems, Inc.>

==================================
驱动程序
[adp94xx / adp94xx][Stopped/Disabled]
  <\SystemRoot\system32\drivers\adp94xx.sys><Adaptec, Inc.>
[adpahci / adpahci][Stopped/Disabled]
  <\SystemRoot\system32\drivers\adpahci.sys><Adaptec, Inc.>
[adpu160m / adpu160m][Stopped/Disabled]
  <\SystemRoot\system32\drivers\adpu160m.sys><Adaptec, Inc.>
[adpu320 / adpu320][Stopped/Disabled]
  <\SystemRoot\system32\drivers\adpu320.sys><Adaptec, Inc.>
[aic78xx / aic78xx][Stopped/Disabled]
  <\SystemRoot\system32\drivers\djsvs.sys><Adaptec, Inc.>
[aliide / aliide][Stopped/Disabled]
  <\SystemRoot\system32\drivers\aliide.sys><Acer Laboratories Inc.>
[Alps Pointing-device Filter Driver / ApfiltrService][Running/Manual Start]
  <system32\DRIVERS\Apfiltr.sys><Alps Electric Co., Ltd.>
[arc / arc][Stopped/Disabled]
  <\SystemRoot\system32\drivers\arc.sys><Adaptec, Inc.>
[arcsas / arcsas][Stopped/Disabled]
  <\SystemRoot\system32\drivers\arcsas.sys><N/A>
[ASMMAP / ASMMAP][Running/Auto Start]
  <\??\C:\Program Files\Lenovo\ATK Hotkey\ASMMAP.sys><>
[Atheros Extensible Wireless LAN device driver / athr][Running/Manual Start]
  <system32\DRIVERS\athr.sys><Atheros Communications, Inc.>
[Brother USB Mass-Storage Lower Filter Driver / BrFiltLo][Stopped/Manual Start]
  <\SystemRoot\system32\drivers\brfiltlo.sys><Brother Industries, Ltd.>
[Brother USB Mass-Storage Upper Filter Driver / BrFiltUp][Stopped/Manual Start]
  <\SystemRoot\system32\drivers\brfiltup.sys><Brother Industries, Ltd.>
[Brother MFC Serial Port Interface Driver (WDM) / Brserid][Stopped/Disabled]
  <\SystemRoot\system32\drivers\brserid.sys><Brother Industries Ltd.>
[Brother WDM Serial driver / BrSerWdm][Stopped/Disabled]
  <\SystemRoot\system32\drivers\brserwdm.sys><Brother Industries Ltd.>
[Brother MFC USB Fax Only Modem / BrUsbMdm][Stopped/Disabled]
  <\SystemRoot\system32\drivers\brusbmdm.sys><Brother Industries Ltd.>
[Brother MFC USB Serial WDM Driver / BrUsbSer][Stopped/Manual Start]
  <\SystemRoot\system32\drivers\brusbser.sys><Brother Industries Ltd.>
[蓝牙音频设备 / btwaudio][Stopped/Manual Start]
  <system32\drivers\btwaudio.sys><Broadcom Corporation.>
[Bluetooth AVDT Service / btwavdt][Stopped/Manual Start]
  <system32\drivers\btwavdt.sys><Broadcom Corporation.>
[Bluetooth L2CAP Service / btwl2cap][Stopped/Manual Start]
  <system32\DRIVERS\btwl2cap.sys><Broadcom Corporation.>
[btwrchid / btwrchid][Stopped/Manual Start]
  <system32\DRIVERS\btwrchid.sys><Broadcom Corporation.>
[CMB8100 / CMB8100][Running/Auto Start]
  <\??\C:\Windows\system32\Drivers\CertClient.dat><N/A>
[CMBProtector / CMBProtector][Running/Auto Start]
  <\??\C:\Windows\system32\Drivers\CMBProtector.dat><N/A>
[cmdide / cmdide][Stopped/Disabled]
  <\SystemRoot\system32\drivers\cmdide.sys><CMD Technology, Inc.>
[Conexant UAA Function Driver for High Definition Audio Service / CnxtHdAudService][Running/Manual Start]
  <system32\drivers\CHDRT32.sys><Conexant Systems Inc.>
[Integrated Camera / DCamUSBGene][Stopped/Manual Start]
  <system32\DRIVERS\usbstk.sys><>
[DLABMFSM / DLABMFSM][Running/Auto Start]
  <System32\DLA\DLABMFSM.SYS><Roxio>
[DLABOIOM / DLABOIOM][Running/Auto Start]
  <System32\DLA\DLABOIOM.SYS><Roxio>
[DLACDBHM / DLACDBHM][Running/System Start]
  <System32\Drivers\DLACDBHM.SYS><Roxio>
[DLADResM / DLADResM][Running/Auto Start]
  <System32\DLA\DLADResM.SYS><Roxio>
[DLAIFS_M / DLAIFS_M][Running/Auto Start]
  <System32\DLA\DLAIFS_M.SYS><Roxio>
[DLAOPIOM / DLAOPIOM][Running/Auto Start]
  <System32\DLA\DLAOPIOM.SYS><Roxio>
[DLAPoolM / DLAPoolM][Running/Auto Start]
  <System32\DLA\DLAPoolM.SYS><Roxio>
[DLARTL_M / DLARTL_M][Running/System Start]
  <System32\Drivers\DLARTL_M.SYS><Roxio>
[DLAUDFAM / DLAUDFAM][Running/Auto Start]
  <System32\DLA\DLAUDFAM.SYS><Roxio>
[DLAUDF_M / DLAUDF_M][Running/Auto Start]
  <System32\DLA\DLAUDF_M.SYS><Roxio>
[DRVMCDB / DRVMCDB][Running/Boot Start]
  <\SystemRoot\System32\Drivers\DRVMCDB.SYS><Sonic Solutions>
[DRVNDDM / DRVNDDM][Running/Auto Start]
  <System32\Drivers\DRVNDDM.SYS><Roxio>
[Intel(R) PRO/1000 PCI Express Network Connection Driver / e1express][Stopped/Manual Start]
  <system32\DRIVERS\e1e6032.sys><Intel Corporation>
[Intel(R) PRO/1000 NDIS 6 Adapter Driver / E1G60][Stopped/Manual Start]
  <system32\DRIVERS\E1G60I32.sys><Intel Corporation>
[elxstor / elxstor][Stopped/Disabled]
  <\SystemRoot\system32\drivers\elxstor.sys><Emulex>
[hookcont / hookcont][Running/System Start]
  <system32\drivers\HookCont.sys><Beijing Rising Information Technology Co., Ltd.>
[hooksys / hooksys][Running/System Start]
  <system32\drivers\HookSys.sys><Beijing Rising Information Technology Co., Ltd.>
[HpCISSs / HpCISSs][Stopped/Disabled]
  <\SystemRoot\system32\drivers\hpcisss.sys><Hewlett-Packard Company>
[HSFHWAZL / HSFHWAZL][Stopped/Manual Start]
  <system32\DRIVERS\VSTAZL3.SYS><Conexant Systems, Inc.>
[HSF_DPV / HSF_DPV][Running/Manual Start]
  <system32\DRIVERS\HSX_DPV.sys><Conexant Systems, Inc.>
[HSXHWAZL / HSXHWAZL][Running/Manual Start]
  <system32\DRIVERS\HSXHWAZL.sys><Conexant Systems, Inc.>
[Intel AHCI Controller / iaStor][Running/Boot Start]
  <\SystemRoot\system32\drivers\iastor.sys><Intel Corporation>
[Intel RAID Controller Vista / iaStorV][Stopped/Disabled]
  <\SystemRoot\system32\drivers\iastorv.sys><Intel Corporation>
[IBMPMDRV / IBMPMDRV][Running/Manual Start]
  <system32\DRIVERS\ibmpmdrv.sys><Lenovo.>
[igfx / igfx][Running/Manual Start]
  <system32\DRIVERS\igdkmd32.sys><Intel Corporation>
[iirsp / iirsp][Stopped/Disabled]
  <\SystemRoot\system32\drivers\iirsp.sys><Intel Corp./ICP vortex GmbH>
[Intel(R) High Definition Audio HDMI / IntcHdmiAddService][Running/Manual Start]
  <system32\drivers\IntcHdmi.sys><Intel(R) Corporation>
[IP in IP Tunnel Driver / IpInIp][Stopped/Manual Start]
  <system32\DRIVERS\ipinip.sys><N/A>
[ITEATAPI_Service_Install / iteatapi][Stopped/Disabled]
  <\SystemRoot\system32\drivers\iteatapi.sys><Integrated Technology Express, Inc.>
[ITERAID_Service_Install / iteraid][Stopped/Disabled]
  <\SystemRoot\system32\drivers\iteraid.sys><Integrated Technology Express, Inc.>
[KAVSafe / KAVSafe][Stopped/Auto Start]
  <\??\C:\Windows\system32\Drivers\KAVSafe.sys><N/A>
[krpr / krpr][Stopped/Manual Start]
  <\??\C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\krpr.sys><N/A>
[Lenovo System Interface Driver / lenovo.smi][Running/System Start]
  <system32\DRIVERS\smiif32.sys><Lenovo Group Limited>
[LSI_FC / LSI_FC][Stopped/Disabled]
  <\SystemRoot\system32\drivers\lsi_fc.sys><LSI Logic>
[LSI_SAS / LSI_SAS][Stopped/Disabled]
  <\SystemRoot\system32\drivers\lsi_sas.sys><LSI Logic>
[LSI_SCSI / LSI_SCSI][Stopped/Disabled]
  <\SystemRoot\system32\drivers\lsi_scsi.sys><LSI Logic>
[mdmxsdk / mdmxsdk][Running/Auto Start]
  <system32\DRIVERS\mdmxsdk.sys><Conexant>
[megasas / megasas][Stopped/Disabled]
  <\SystemRoot\system32\drivers\megasas.sys><LSI Corporation>
[MegaSR / MegaSR][Stopped/Disabled]
  <\SystemRoot\system32\drivers\megasr.sys><LSI Corporation, Inc.>
[Mraid35x / Mraid35x][Stopped/Disabled]
  <\SystemRoot\system32\drivers\mraid35x.sys><LSI Logic Corporation>
[ATK0101 ACPI UTILITY / MTsensor][Running/Manual Start]
  <system32\DRIVERS\A0101V32.sys><ATK0100>
[nfrd960 / nfrd960][Stopped/Disabled]
  <\SystemRoot\system32\drivers\nfrd960.sys><IBM Corporation>
[N-trig HID Tablet Driver / ntrigdigi][Stopped/Disabled]
  <\SystemRoot\system32\drivers\ntrigdigi.sys><N-trig Innovative Technologies>
[NVIDIA nForce RAID Driver    / nvraid][Stopped/Disabled]
  <\SystemRoot\system32\drivers\nvraid.sys><NVIDIA Corporation>
[nvstor / nvstor][Stopped/Disabled]
  <\SystemRoot\system32\drivers\nvstor.sys><NVIDIA Corporation>
[IPX Traffic Filter Driver / NwlnkFlt][Stopped/Manual Start]
  <system32\DRIVERS\nwlnkflt.sys><N/A>
[IPX Traffic Forwarder Driver / NwlnkFwd][Stopped/Manual Start]
  <system32\DRIVERS\nwlnkfwd.sys><N/A>
[Lenovo Parties Service Access Device Driver / psadd][Running/Manual Start]
  <system32\DRIVERS\psadd.sys><Lenovo (United States) Inc.>
[PxHelp20 / PxHelp20][Running/Boot Start]
  <\SystemRoot\System32\Drivers\PxHelp20.sys><Sonic Solutions>
[QLogic Fibre Channel Miniport Driver / ql2300][Stopped/Disabled]
  <\SystemRoot\system32\drivers\ql2300.sys><QLogic Corporation>
[QLogic iSCSI Miniport Driver / ql40xx][Stopped/Disabled]
  <\SystemRoot\system32\drivers\ql40xx.sys><QLogic Corporation>
[rimmptsk / rimmptsk][Running/Auto Start]
  <system32\DRIVERS\rimmptsk.sys><REDC>
[rimsptsk / rimsptsk][Running/Auto Start]
  <system32\DRIVERS\rimsptsk.sys><REDC>
[Ricoh xD-Picture Card Driver / rismxdp][Running/Auto Start]
  <system32\DRIVERS\rixdptsk.sys><REDC>
[rsassist / rsassist][Running/Auto Start]
  <system32\drivers\rsassist.sys><Beijing Rising Information Technology Co., Ltd.>
[RsNTGDI / RsNTGDI][Running/Boot Start]
  <\SystemRoot\system32\Drivers\RsNTGdi.sys><Beijing Rising Information Technology Co., Ltd.>
[Realtek 8169 NT Driver / RTL8169][Running/Manual Start]
  <system32\DRIVERS\Rtlh86.sys><Realtek>
[Shockprf / Shockprf][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\Apsx86.sys><Lenovo.>
[SiSRaid4 / SiSRaid4][Stopped/Disabled]
  <\SystemRoot\system32\drivers\sisraid4.sys><Silicon Integrated Systems>
[Symc8xx / Symc8xx][Stopped/Disabled]
  <\SystemRoot\system32\drivers\symc8xx.sys><LSI Logic>
[Sym_hi / Sym_hi][Stopped/Disabled]
  <\SystemRoot\system32\drivers\sym_hi.sys><LSI Logic>
[Sym_u3 / Sym_u3][Stopped/Disabled]
  <\SystemRoot\system32\drivers\sym_u3.sys><LSI Logic>
[TPDIGIMN / TPDIGIMN][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\ApsHM86.sys><Lenovo.>
[TPPWRIF / TPPWRIF][Running/System Start]
  <System32\drivers\Tppwr32v.sys><N/A>
[tvtfilter / tvtfilter][Running/Auto Start]
  <system32\DRIVERS\tvtfilter.sys><Lenovo>
[tvtumon / tvtumon][Stopped/System Start]
  <system32\DRIVERS\tvtumon.sys><Lenovo>
[uliahci / uliahci][Stopped/Disabled]
  <\SystemRoot\system32\drivers\uliahci.sys><ULi Electronics Inc.>
[UlSata / UlSata][Stopped/Disabled]
  <\SystemRoot\system32\drivers\ulsata.sys><Promise Technology, Inc.>
[ulsata2 / ulsata2][Stopped/Disabled]
  <\SystemRoot\system32\drivers\ulsata2.sys><Promise Technology, Inc.>
[viaide / viaide][Stopped/Disabled]
  <\SystemRoot\system32\drivers\viaide.sys><VIA Technologies, Inc.>
[vsmraid / vsmraid][Stopped/Disabled]
  <\SystemRoot\system32\drivers\vsmraid.sys><VIA Technologies Inc.,Ltd>
[winachsf / winachsf][Running/Manual Start]
  <system32\DRIVERS\HSX_CNXT.sys><Conexant Systems, Inc.>
[XAudio / XAudio][Running/Auto Start]
  <system32\DRIVERS\xaudio.sys><Conexant Systems, Inc.>

==================================
浏览器加载项
[QQCycloneHelper Class]
  {00000000-12C9-4305-82F9-43058F20E8D2} <C:\Program Files\Tencent\QQDownload\QQIEHelper02.dll, (Signed) Tencent Technology (Shenzhen) Company Limited>
[WebThunder Browser Helper]
  {00000AAA-A363-466E-BEF5-9BB68697AA7F} <C:\Program Files\Thunder Network\WebThunder\WebThunderBHO_Now.dll, (Signed) Thunder Networking Technologies,LTD>
[ThunderAtOnce Class]
  {01443AEC-0FD1-40fd-9C87-E93D1494C233} <C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll, (Signed) Thunder Networking Technologies,LTD>
[Adobe PDF Reader Link Helper]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll, (Signed) Adobe Systems Incorporated>
[WebProtect]
  {53763D1D-9CA8-4C7C-9756-A8E6B8FC063B} <C:\Program Files\CMBCHINA\WebProtect\WebProtect.dll, (Signed) China Merchants Bank>
[QvodExtend]
  {53AC8551-0DE0-4606-8A1E-A51AF20ADD60} <C:\QvodPlayer\QvodExtend.dll, (Signed) Shenzhen QVOD Technology Co.,Ltd>
[Search Helper]
  {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} <C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll, (Signed) Microsoft Corporation>
[BOC ProcessProtect Class]
  {776B71E2-B4CC-4C94-BC7C-09103AA690B6} <C:\Windows\system32\ProcessProtection.dll, (Signed) www.ISRA.org.cn>
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll, (Signed) Thunder Networking Technologies,LTD>
[Windows Live 登录帮助程序]
  {9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, (Signed) Microsoft Corporation>
[IePasswordManagerHelper Class]
  {BF468356-BB7E-42D7-9F15-4F3B9BCFCED2} <C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll, (Signed) Lenovo Group Limited>
[Java(tm) Plug-In 2 SSV Helper]
  {DBC80044-A445-435b-BC74-9C25C1C588A9} <C:\Program Files\Java\jre6\bin\jp2ssv.dll, (Signed) Sun Microsystems, Inc.>
[Windows Live Toolbar Helper]
  {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} <C:\Program Files\Windows Live\Toolbar\wltcore.dll, (Signed) Microsoft Corporation>
[启动迅雷5]
  {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <C:\Program Files\Thunder Network\Thunder\Thunder.exe, (Signed) 深圳市迅雷网络技术有限公司>
[BlogThisToolbarButton Class]
  {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} <C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll, (Signed) Microsoft Corporation>
[信息检索(&R)]
  {92780B25-18CC-41C8-B9BE-3C9C571A8263} <C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL, (Signed) Microsoft Corporation>
[PPLive]
  {95B3F550-91C4-4627-BCC4-521288C52977} <C:\Program Files\PPLive\PPTV\PPLive.exe, (Signed) PPLive Corporation>
[启动网页迅雷09t]
  {962EFB8E-2683-42d4-AC74-AAA4C759B9C6} <http://my.xunlei.com, N/A>
[@btrez.dll,-4015]
  {CCA281CA-C863-46ef-9331-5C8D4460577F} <, >
[IePasswordManagerMenu Class]
  {F4F55DC8-0B69-4DFE-BA94-CB677B88B2A3} <C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll, (Signed) Lenovo Group Limited>
[&Windows Live Toolbar]
  {21FA44EF-376D-4D53-9B0F-8A89D3229068} <C:\Program Files\Windows Live\Toolbar\wltcore.dll, (Signed) Microsoft Corporation>
[DrvCert Class]
  {2FD68643-4BCE-4EF5-B7B8-F0F1192FDE86} <C:\PROGRA~1\Walker\DrvInst\Bin\DrvCertC.dll, 北京易软健计算机技术有限公司>
[EditCtrl Class]
  {488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\Windows\system32\aliedit\aliedit.dll, (Signed) >
[InfoSecNetSign Class]
  {62B938C4-4190-4F37-8CF0-A92B0A91CC77} <C:\Windows\system32\NetSign.dll, (Signed) Infosec Technologies Co., Ltd.>
[Java Plug-in 1.6.0_17]
  {8AD9C840-044E-11D1-B3E9-00805F499D93} <C:\Program Files\Java\jre6\bin\jp2iexp.dll, (Signed) >
[Java Plug-in 1.6.0_17]
  {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} <C:\Program Files\Java\jre6\bin\jp2iexp.dll, (Signed) >
[Java Plug-in 1.6.0_17]
  {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} <C:\Program Files\Java\jre6\bin\npjpi160_17.dll, (Signed) Sun Microsystems, Inc.>
[]
  {E2883E8F-472F-4FB0-9522-AC9BF37916A7} <, >
[QQCycloneHelper Class]
  {00000000-12C9-4305-82F9-43058F20E8D2} <C:\Program Files\Tencent\QQDownload\QQIEHelper02.dll, (Signed) Tencent Technology (Shenzhen) Company Limited>
[WebThunder Browser Helper]
  {00000AAA-A363-466E-BEF5-9BB68697AA7F} <C:\Program Files\Thunder Network\WebThunder\WebThunderBHO_Now.dll, (Signed) Thunder Networking Technologies,LTD>
[ThunderAtOnce Class]
  {01443AEC-0FD1-40FD-9C87-E93D1494C233} <C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll, (Signed) Thunder Networking Technologies,LTD>
[WebThunder Class]
  {03507A1A-E0C5-4404-AA26-205385C0892D} <, >
[Adobe PDF Reader Link Helper]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll, (Signed) Adobe Systems Incorporated>
[]
  {08B0E5C0-4FCB-11CF-AAA5-00401C608501} <, >
[]
  {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <, >
[Edit Class]
  {0CA54D3F-CEAE-48AF-9A2B-31909CB9515D} <C:\Windows\system32\CMBEdit.dll, (Signed) >
[VistaWUWebControl Class]
  {12A66224-5E8A-4679-8941-0B9B960BF5EA} <%SystemRoot%\system32\wuwebv.dll, (Signed) N/A>
[InformationCardSigninHelper Class]
  {19916E01-B44E-4E31-94A4-4696DF46157B} <C:\Windows\system32\icardie.dll, (Signed) Microsoft Corporation>
[CsswebActivex Control]
  {1BC4E1F9-758D-4BDA-A7DE-A9E1DA7D1E41} <C:\PROGRA~1\cssweb\CSSWEB~2.OCX, (Signed) 北京中软万维网络技术有限公司>
[WWPicUploadCtrl Class]
  {1D63232D-4F15-4A42-890D-EE617AA1537D} <C:\Program Files\AliWangWang\modules\1685\WWPictureUpload.dll, Alibaba software (Shanghai) Corporation>
[iTrusPTA Class]
  {1E0DFFCF-27FF-4574-849B-55007349FEDA} <C:\Windows\system32\aliedit\pta.dll, (Signed) >
[InfoScan Control]
  {1F14548F-6975-40F1-AE24-6E2D1D449B2F} <C:\PROGRA~1\CCBCOM~1\Detector\InfoScan.dll, CCB>
[]
  {219C3416-8CB2-491A-A3C7-D9FCDDC9D600} <, >
[&Windows Live Toolbar]
  {21FA44EF-376D-4D53-9B0F-8A89D3229068} <C:\Program Files\Windows Live\Toolbar\wltcore.dll, (Signed) Microsoft Corporation>
[HTML Document]
  {25336920-03F9-11CF-8FD0-00AA00686F13} <C:\Windows\system32\mshtml.dll, (Signed) Microsoft Corporation>
[XML DOM Document]
  {2933BF90-7B36-11D2-B20E-00C04F983E60} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A>
[DrvCert Class]
  {2FD68643-4BCE-4EF5-B7B8-F0F1192FDE86} <C:\PROGRA~1\Walker\DrvInst\Bin\DrvCertC.dll, 北京易软健计算机技术有限公司>
[HtmlDlgSafeHelper Class]
  {3050F819-98B5-11CF-BB82-00AA00BDCE0B} <C:\Windows\system32\mshtmled.dll, (Signed) Microsoft Corporation>
[]
  {30A3ACF9-DA6E-4CA0-A081-E06282DF1C64} <, >
[SNCtrl Class]
  {391E41FF-1CE1-493F-9B34-8BC53FB76A86} <C:\Windows\system32\HDCCBCtrl.dll, (Signed) >
[Thunder Agent Class]
  {485463B7-8FB2-4B3B-B29B-8B919B0EACCE} <C:\Program Files\Thunder Network\Thunder\ComDlls\ThunderAgent_Now.dll, (Signed) Thunder Networking Technologies,LTD>
[EditCtrl Class]
  {488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\Windows\system32\aliedit\aliedit.dll, (Signed) >
[WebProtect]
  {53763D1D-9CA8-4C7C-9756-A8E6B8FC063B} <C:\Program Files\CMBCHINA\WebProtect\WebProtect.dll, (Signed) China Merchants Bank>
[QvodExtend]
  {53AC8551-0DE0-4606-8A1E-A51AF20ADD60} <C:\QvodPlayer\QvodExtend.dll, (Signed) Shenzhen QVOD Technology Co.,Ltd>
[Shell Name Space]
  {55136805-B2DE-11D1-B9F2-00A0C98BC547} <C:\Windows\system32\ieframe.dll, (Signed) Microsoft Corporation>
[isInstalled Class]
  {5852F5ED-8BF4-11D4-A245-0080C6F74284} <C:\Program Files\Java\jre6\bin\wsdetect.dll, Sun Microsystems, Inc.>
[WangWangX Class]
  {5D09DD40-CDC4-4C56-B615-0D1E3B357C2B} <C:\Program Files\AliWangWang\AliIMX.dll, (Signed) Alibaba software (Shanghai) Corporation.>
[InfoSecNetSign Class]
  {62B938C4-4190-4F37-8CF0-A92B0A91CC77} <C:\Windows\system32\NetSign.dll, (Signed) Infosec Technologies Co., Ltd.>
[]
  {62D022C8-6EB3-4E06-8101-99D3379620C6} <, >
[DrvINFReader Class]
  {631AC624-4EA0-49AB-ABD7-64409592AE15} <C:\PROGRA~1\Walker\DrvInst\Bin\DrvInf.dll, 北京易软健计算机技术有限公司>
[XMP Class]
  {6483F145-A768-4C41-AACC-52D4D7845851} <C:\ProgramData\Thunder Network\KanKan\xplayer.dll_1_work, 深圳市迅雷网络技术有限公司>
[Windows Media Player]
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <%SystemRoot%\system32\wmp.dll, (Signed) N/A>
[Search Helper]
  {6EBF7485-159F-4BFF-A14F-B9E3AAC4465B} <C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll, (Signed) Microsoft Corporation>
[]
  {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} <, >
[MediaComm Class]
  {7670648D-461B-42AF-BDFE-46D26AF5EFF2} <C:\Program Files\Thunder Network\Thunder\Components\InMedia\MediaAddin19.dll, (Signed) 深圳市迅雷网络技术有限公司>
[BOC ProcessProtect Class]
  {776B71E2-B4CC-4C94-BC7C-09103AA690B6} <C:\Windows\system32\ProcessProtection.dll, (Signed) www.ISRA.org.cn>
[Microsoft Web Browser]
  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\Windows\system32\ieframe.dll, (Signed) Microsoft Corporation>
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll, (Signed) Thunder Networking Technologies,LTD>
[XML HTTP 4.0]
  {88D969C5-F192-11D4-A65F-0040963251E5} <c:\Windows\system32\msxml4.dll, (Signed) Microsoft Corporation>
[QQDownload Class]
  {8AC3BC28-E145-4385-A694-8AAC128ACB16} <C:\Program Files\Tencent\QQDownload\QQIEHelper02.dll, (Signed) Tencent Technology (Shenzhen) Company Limited>
[Windows Live 登录帮助程序]
  {9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, (Signed) Microsoft Corporation>
[DrvInst Class]
  {9222E48D-8985-4BE2-B9DB-EBE734CBE7B5} <C:\Program Files\Walker\DrvInst\Bin\DrvInst.dll, 北京易软健计算机技术有限公司>
[]
  {92780B25-18CC-41C8-B9BE-3C9C571A8263} <, >
[]
  {95B3F550-91C4-4627-BCC4-521288C52977} <, >
[]
  {962EFB8E-2683-42D4-AC74-AAA4C759B9C6} <, >
[OFrameObject Class]
  {9701758C-4373-482E-B13C-776C048EC890} <C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.3.5814.165.(71).dll, (Signed) 深圳市迅雷网络技术有限公司>
[VersionDetector Class]
  {9EFF1953-9694-47B1-AEF6-B2A3FE8BFE9B} <C:\Program Files\Common Files\Thunder Network\KanKan\vd.1.1.0.14.(14).dll, ShenZhen Thunder Networking Technologies,Ltd.>
[DapCtrl Class]
  {ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8} <C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.3.5814.165.(71).dll, (Signed) 深圳市迅雷网络技术有限公司>
[GtjaUsbKeyApi Class]
  {B402DE16-5DB2-42B8-A4EB-277F3E3D91CE} <C:\Program Files\cssweb\GtjaUsbKey.dll, (Signed) >
[InfosecCCBNetSign Class]
  {BC96F5A4-C930-4226-ADAB-59349AE585E9} <C:\Program Files\CCBComponents\Detector\CCBNetSignCom.dll, (Signed) Infosec Technologies Co., Ltd.>
[]
  {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} <, >
[]
  {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} <, >
[IePasswordManagerHelper Class]
  {BF468356-BB7E-42D7-9F15-4F3B9BCFCED2} <C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll, (Signed) Lenovo Group Limited>
[]
  {CCA281CA-C863-46EF-9331-5C8D4460577F} <, >
[Windows Live 登录控制]
  {D2517915-48CE-4286-970F-921E881B8C5C} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, (Signed) Microsoft Corporation>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\Windows\system32\Macromed\Flash\Flash10h.ocx, (Signed) Adobe Systems, Inc.>
[Java(tm) Plug-In 2 SSV Helper]
  {DBC80044-A445-435B-BC74-9C25C1C588A9} <C:\Program Files\Java\jre6\bin\jp2ssv.dll, (Signed) Sun Microsystems, Inc.>
[Microsoft Silverlight]
  {DFEAF541-F3E1-4C24-ACAC-99C30715084A} <c:\Program Files\Microsoft Silverlight\4.0.50524.0\npctrl.dll,  Microsoft Corporation>
[Windows Live Toolbar Helper]
  {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} <C:\Program Files\Windows Live\Toolbar\wltcore.dll, (Signed) Microsoft Corporation>
[]
  {E1771B7F-98BE-407F-BA67-AA16ADA5D0C5} <C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGSC1~1.DLL, (Signed) Microsoft Corporation>
[BOC Edit Class]
  {E61E8363-041F-455C-8AD0-8A61F1D8E540} <C:\Windows\system32\KeyboardProtection.dll, (Signed) www.ISRA.org.cn>
[Google Update Plugin]
  {E9DA06F1-632C-462F-98B3-AF74B47DA727} <C:\Users\Rita\AppData\Local\Google\Update\1.2.183.29\npGoogleOneClick8.dll, (Signed) Google Inc.>
[XML HTTP Request]
  {ED8C108E-4349-11D2-91A4-00C04F7969E8} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A>
[PPLive Lite Class]
  {EF0D1A14-1033-41A2-A589-240C01EDC078} <C:\Program Files\Internet Explorer\PPLite\plugin\pplugin2.dll, (Signed) >
[]
  {F06608C7-1874-4EEA-B3B2-DF99EBB144B8} <C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGSC1~1.DLL, (Signed) Microsoft Corporation>
[PBActiveX40 Control]
  {F2EB8999-766E-4BF6-AAAD-188D398C0D0B} <C:\Windows\system32\PersonalBankMain.ocx, (Signed) China Merchants Bank>
[XPPlayer Class]
  {F3E70CEA-956E-49CC-B444-73AFE593AD7F} <C:\Program Files\Common Files\Thunder Network\KanKan\PPlayer.2.1.58130.251.(70).dll, (Signed) 深圳市迅雷网络技术有限公司>
[CsswebLogin Control]
  {F43B35B7-C29A-453F-86E9-C37412269D62} <C:\PROGRA~1\cssweb\CSSWEB~1.OCX, (Signed) 国泰君安证券>
[IePasswordManagerMenu Class]
  {F4F55DC8-0B69-4DFE-BA94-CB677B88B2A3} <C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll, (Signed) Lenovo Group Limited>
[XML HTTP 3.0]
  {F5078F35-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A>
[XML DOM Document]
  {F6D90F11-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A>
[XML HTTP]
  {F6D90F16-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A>
[ssoActivex Class]
  {FAC87377-9586-4C72-A614-8C9B3CA1BF5B} <C:\Program Files\cssweb\ssoLib.dll, (Signed) >
[webmod Class]
  {FEE3C8C5-9BEA-4079-AB36-63ECABFC7392} <C:\Windows\system32\aliedit\alidcp.dll, (Signed) Alipay.com Co.,Ltd>
[&使用QQ旋风下载]
  <C:\Program Files\Tencent\QQDownload\geturl.htm, N/A>
[&使用QQ旋风下载全部链接]
  <C:\Program Files\Tencent\QQDownload\getAllurl.htm, N/A>
[上传到淘江湖相册]
  <C:\Program Files\AliWangWang\AddToAlbum.htm, N/A>
[使用网页迅雷下载]
  <C:\Program Files\Thunder Network\WebThunder\GetUrl.htm, N/A>
[使用网页迅雷下载全部链接]
  <C:\Program Files\Thunder Network\WebThunder\GetAllUrl.htm, N/A>
[使用迅雷下载]
  <C:\Program Files\Thunder Network\Thunder\Program\geturl.htm, N/A>
[使用迅雷下载全部链接]
  <C:\Program Files\Thunder Network\Thunder\Program\getallurl.htm, N/A>
[图像发送到 Bluetooth 设备(&B)...]
  <C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm, N/A>
[导出到 Microsoft Excel(&X)]
  <res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000, N/A>
[添加为阿里旺旺表情]
  <C:\Program Files\AliWangWang\AddNewEmotion.htm, N/A>
[添加到QQ表情]
  <C:\Program Files\Tencent\QQ\Bin\AddEmotion.htm, N/A>
[页面发送到 Bluetooth 设备(&B)...]
  <C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm, N/A>

==================================
正在运行的进程
[PID: 492 / SYSTEM][\SystemRoot\System32\smss.exe]  [(Verified) Microsoft Corporation, 6.0.6002.18005 (lh_sp2rtm.090410-1830)]
[PID: 568 / SYSTEM][C:\Windows\system32\csrss.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 612 / SYSTEM][C:\Windows\system32\wininit.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 624 / SYSTEM][C:\Windows\system32\csrss.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 656 / SYSTEM][C:\Windows\system32\services.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 668 / SYSTEM][C:\Windows\system32\lsass.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 680 / SYSTEM][C:\Windows\system32\lsm.exe]  [(Verified) Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840)]
[PID: 784 / SYSTEM][C:\Windows\system32\winlogon.exe]  [(Verified) Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840)]
[PID: 856 / SYSTEM][C:\Windows\system32\svchost.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 920 / SYSTEM][C:\Windows\system32\ibmpmsvc.exe]  [Lenovo, 1.44]
[PID: 976 / NETWORK SERVICE][C:\Windows\system32\svchost.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 1016 / SYSTEM][C:\Program Files\Rising\Rav\RavMonD.exe]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    [C:\Program Files\Rising\Rav\combase.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 17]
    [C:\Program Files\Rising\Rav\cnt09.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5]
    [C:\Program Files\Rising\Rav\moncomm.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 9]
    [C:\Program Files\Rising\Rav\MonBase.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    [C:\Program Files\Rising\Rav\Rslog.dll]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.41]
    [C:\Program Files\Rising\Rav\mondrv.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6]
    [C:\Program Files\Rising\Rav\defmon.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 46]
    [C:\Program Files\Rising\Rav\moncom08.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1]
    [C:\Program Files\Rising\Rav\MonRule.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 10]
    [C:\Program Files\Rising\Rav\FileMon.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 29]
    [C:\Program Files\Rising\Rav\MailMon.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 22]
    [C:\Program Files\Rising\Rav\HookWeb.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 12]
    [C:\Program Files\Rising\Rav\rsindent.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 11]
    [C:\Program Files\Rising\Rav\Syslay.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    [C:\Program Files\Rising\Rav\taskplug.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 10]
    [C:\Program Files\Rising\Rav\scansrvp.dll]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.7]
    [C:\Program Files\Rising\Rav\cnt08.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1]
    [C:\Program Files\Rising\Rav\proccomm.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4]
    [C:\Program Files\Rising\Rav\RSAPPMGR.dll]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.0]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.0]
    [C:\Program Files\Rising\Rav\comx3.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    [C:\Program Files\Rising\Rav\Hooksys.dll]  [Beijing Rising Information Technology Co., Ltd., 24, 0, 0, 3]
    [C:\Program Files\Rising\Rav\ProcCom.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [C:\Program Files\Rising\Rav\RsCommX2.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [C:\Program Files\Rising\Rav\HookCont.dll]  [Beijing Rising Information Technology Co., Ltd., 24, 0, 0, 1]
    [C:\Program Files\Rising\Rav\BACore.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 39]
    [C:\Program Files\Rising\Rav\recomp.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6]
    [C:\Program Files\Rising\Rav\refs.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    [C:\Program Files\Rising\Rav\viruslib.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    [C:\Program Files\Rising\Rav\relibldr.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    [C:\Program Files\Rising\Rav\rsnetsvr.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    [C:\Program Files\Rising\Rav\bawhite.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    [C:\Program Files\Rising\Rav\RSStore.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5]
    [C:\Program Files\Rising\Rav\Scanner.dll]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.22]
    [C:\Program Files\Rising\Rav\ScanAdd.dll]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.4]
    [C:\Program Files\Rising\Rav\NComm2.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    [C:\Program Files\Rising\Rav\rstask.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5]
    [C:\Program Files\Rising\Rav\rsstub.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1]
    [C:\Program Files\Rising\Rav\ScanSrv.dll]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.3]
    [C:\Program Files\Rising\Rav\scanpe.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 10]
    [C:\Program Files\Rising\Rav\pearc.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    [C:\Program Files\Rising\Rav\ur000.dat]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4]
    [C:\Program Files\Rising\Rav\urutils.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1]
    [C:\Program Files\Rising\Rav\revm.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6]
    [C:\Program Files\Rising\Rav\ffr.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4]
    [C:\Program Files\Rising\Rav\nvfile.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1]
    [C:\Program Files\Rising\Rav\scanexec.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    [C:\Program Files\Rising\Rav\unexe.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    [C:\Program Files\Rising\Rav\scanex.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 81]
    [C:\Program Files\Rising\Rav\scansct.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4]
    [C:\Program Files\Rising\Rav\extmail.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5]
    [C:\Program Files\Rising\Rav\ur001.dat]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    [C:\Program Files\Rising\Rav\scantj.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4]
    [C:\Program Files\Rising\Rav\methodex.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    [C:\Program Files\Rising\Rav\heurex.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 17]
    [C:\Program Files\Rising\Rav\pecompd.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5]
    [C:\Program Files\Rising\Rav\ScanRavT.dll]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.4]
    [C:\Program Files\Rising\Rav\ScanBT.dll]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.21]
    [C:\Program Files\Rising\Rav\ScanStub.dll]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.1]
    [C:\Program Files\Rising\Rav\extole.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1]
    [C:\Program Files\Rising\Rav\extsfx.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4]
[PID: 1072 / SYSTEM][C:\Windows\System32\svchost.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 1156 / LOCAL SERVICE][C:\Windows\System32\svchost.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Windows\System32\mfplat.dll]  [Microsoft Corporation, 11.0.6002.18005 (lh_sp2rtm.090410-1830)]
[PID: 1200 / SYSTEM][C:\Windows\System32\svchost.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 1220 / SYSTEM][C:\Windows\system32\svchost.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 1316 / SYSTEM][C:\Program Files\Apoint2K\ApRunSvc.exe]  [N/A, ]
[PID: 1328 / SYSTEM][C:\Windows\system32\svchost.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 1344 / NETWORK SERVICE][C:\Windows\system32\SLsvc.exe]  [(Verified) Microsoft Corporation, 6.0.6002.18005 (lh_sp2rtm.090410-1830)]
[PID: 1368 / LOCAL SERVICE][C:\Windows\system32\svchost.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 32]
    [C:\Windows\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Windows\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
[PID: 1492 / NETWORK SERVICE][C:\Windows\system32\svchost.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 1656 / SYSTEM][C:\Program Files\Lenovo\ATK Hotkey\ASLDRSrv.exe]  [, 1.0.3.0]
[PID: 1668 / SYSTEM][C:\Program Files\Lenovo\ATK Hotkey\GFNEXSrv.exe]  [, 1, 0, 0, 0]
[PID: 1676 / SYSTEM][C:\Windows\system32\WLANExt.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Windows\system32\athihvs.dll]  [Atheros, 1.0.0.91]
[PID: 1700 / SYSTEM][C:\Program Files\Lenovo\ATK Hotkey\LFKAS.exe]  [, 1, 0, 0, 1]
[PID: 1740 / SYSTEM][C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\KSWebShield.exe]  [Kingsoft Corporation, 2010,06,08,208]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kdump.dll]  [Kingsoft Corporation, 2010,06,25,1157]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwssp.dll]  [Kingsoft Corporation, 2010,07,09,15]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kxebase.dll]  [Kingsoft Corporation, 2009,11,20,309]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\scom.dll]  [Kingsoft Corporation, 2009,11,20,309]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kxecore\kxelog.dll]  [Kingsoft Corporation, 2009,11,20,309]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kxecore\kxecore.dll]  [Kingsoft Corporation, 2009,11,20,309]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kxecore\kxestat.dll]  [Kingsoft Corporation, 2010,5,12,402]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\report\kinfoc.dll]  [Kingsoft Corporation, 2010,05,07,677]
[PID: 1964 / SYSTEM][C:\Windows\System32\spoolsv.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 1972 / SYSTEM][C:\Windows\system32\taskeng.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 1996 / LOCAL SERVICE][C:\Windows\system32\svchost.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 560 / SYSTEM][C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcLocSettings.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\ThinkPad\ConnectUtilities\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgr.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcCryptHlpr.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACHelper.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACON.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACTurinSupport.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcSmBiosHelper.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcAdaptersInfo.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcLocMigrator.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\ThinQCon.dll]  [Lenovo, 5.20]
[PID: 844 / LOCAL SERVICE][C:\Windows\system32\svchost.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 1212 / SYSTEM][C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe]  [Broadcom Corporation., 6.1.0.4500]
[PID: 1436 / SYSTEM][C:\Windows\System32\svchost.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [c:\program files\walker\drvinst\bin\drvsvc.dll]  [北京易软健计算机技术有限公司, 1, 0, 0, 0]
[PID: 2044 / SYSTEM][C:\Windows\system32\HZ_CommSrv.exe]  [华大智宝电子系统有限公司, 1, 2, 0, 1]
[PID: 2136 / SYSTEM][C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe]  [InterVideo, 1, 0, 4, 0]
[PID: 2328 / NETWORK SERVICE][C:\Windows\system32\svchost.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 2360 / SYSTEM][C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE]  [Lenovo, 1.0.0.1]
    [C:\Windows\WinSxS\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.762_none_11ecb0ab9b2caf3c\ATL80.DLL]  [Microsoft Corporation, 8.00.50727.762]
[PID: 2684 / SYSTEM][C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe]  [Microsoft Corporation, 1.3.59.0]
[PID: 2724 / LOCAL SERVICE][C:\Windows\system32\svchost.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 2764 / SYSTEM][C:\Windows\System32\TPHDEXLG.exe]  [Lenovo., 1.60.0.6]
[PID: 2788 / SYSTEM][C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe]  [Lenovo Group Limited, 1.03]
[PID: 2808 / NETWORK SERVICE][C:\Program Files\Lenovo\Client Security Solution\tvttcsd.exe]  [Lenovo, 8.02.0009.00]
[PID: 2856 / SYSTEM][C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe]  [, 4,21,11,0]
    [C:\Windows\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Windows\system32\MFC71U.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Windows\system32\MFC71CHS.DLL]  [Microsoft Corporation, 7.10.3077.0]
[PID: 2876 / SYSTEM][C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe]  [Lenovo Group Limited, 4,21,11,0]
    [C:\Windows\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\Lenovo\Rescue and Recovery\zlib.dll]  [Lenovo Group Limited, 4,21,11,0]
    [c:\Program Files\Common Files\Lenovo\ui.dll]  [Lenovo Group Limited, 4,21,11,0]
    [C:\Program Files\Lenovo\Rescue and Recovery\CDRecord.dll]  [N/A, ]
    [C:\Windows\system32\MFC71U.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Windows\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Windows\system32\MFC71CHS.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Lenovo\Rescue and Recovery\rr_res.dll]  [Lenovo Limited Group Corporation, 4,21,11,0]
    [c:\Program Files\Common Files\Lenovo\tvt_think_res.dll]  [Lenovo Group Limited, 6.02.0010.00]
    [C:\Program Files\Lenovo\Rescue and Recovery\rnr_think_res.dll]  [Lenovo Group Limited, 4,21,4,0]
    [C:\Windows\system32\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]

[PID: 2916 / SYSTEM][c:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe]  [Lenovo Group Limited, 4,21,10,0]
    [C:\Windows\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Windows\system32\MFC71U.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Windows\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Windows\system32\MFC71CHS.DLL]  [Microsoft Corporation, 7.10.3077.0]
[PID: 2972 / SYSTEM][C:\Windows\system32\WatchData\Watchdata CCB CSP v3.2\WDKeyMonitorCCB.exe]  [ Beijing WatchData System Co., Ltd., 3, 2, 0, 0]
    [C:\Windows\system32\WatchData\Watchdata CCB CSP v3.2\wdkmgr.dll]  [Watchdata, 2, 1, 1, 40]
[PID: 2996 / SYSTEM][C:\Windows\System32\svchost.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 3020 / SYSTEM][C:\Windows\system32\SearchIndexer.exe]  [(Verified) Microsoft Corporation, 7.00.6002.18005 (lh_sp2rtm.090410-1830)]
[PID: 3060 / SYSTEM][C:\Windows\system32\DRIVERS\xaudio.exe]  [Conexant Systems, Inc., 1.00.15.00]
[PID: 3092 / SYSTEM][C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcLocSettings.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\ThinkPad\ConnectUtilities\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgr.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcCryptHlpr.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACHelper.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACON.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACTurinSupport.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcSmBiosHelper.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcSvcHlpr.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcAdaptersInfo.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcSvcStub.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACVistaWlAutoconfig.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\AvayaConfig.dll]  [Avaya, 1.0.0.1]
[PID: 3128 / SYSTEM][c:\Program Files\Lenovo\System Update\SUService.exe]  [Lenovo Group Limited, 3.0.23.0]
    [C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\894183c0c47bd4772fbfad4c1a7e3b71\mscorlib.ni.dll]  [Microsoft Corporation, 2.0.50727.4200 (NetFxQFE.050727-4200)]
    [C:\Windows\assembly\NativeImages_v2.0.50727_32\System\b8e4a9556d3ddd49ec70aae0516c2007\System.ni.dll]  [Microsoft Corporation, 2.0.50727.4205 (VistaSP2GDR.050727-4200)]
    [C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\6ab74b6e4a68bf93e3b27263317f744d\System.ServiceProcess.ni.dll]  [Microsoft Corporation, 2.0.50727.4016 (NetFxQFE.050727-4000)]
    [c:\Program Files\Lenovo\System Update\TvsuServiceCommon.dll]  [ , 0.0.0.0]
    [C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\f4e9769eaf42b9c2c0d795b1a99c3dbc\System.Xml.ni.dll]  [Microsoft Corporation, 2.0.50727.4016 (NetFxQFE.050727-4000)]
    [C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\65f4d9a8fc295689d68109d0099b356b\System.Management.ni.dll]  [Microsoft Corporation, 2.0.50727.4016 (NetFxQFE.050727-4000)]
[PID: 3560 / NETWORK SERVICE][C:\Windows\system32\wbem\wmiprvse.exe]  [(Verified) Microsoft Corporation, 6.0.6002.18005 (lh_sp2rtm.090410-1830)]
[PID: 3876 / SYSTEM][C:\Program Files\ThinkPad\ConnectUtilities\SvcGuiHlpr.exe]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcLocSettings.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\ThinkPad\ConnectUtilities\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgr.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcCryptHlpr.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACHelper.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcSvcStub.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACGUIHlpr.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\MFC71U.DLL]  [Microsoft Corporation, 7.10.5057.0]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcAdaptersInfo.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACON.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACTurinSupport.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcSmBiosHelper.dll]  [Lenovo, 5.20]
    [C:\Windows\system32\MFC71CHS.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\ThinkPad\ConnectUtilities\Res\SC\GUIHlprRes.dll]  [Lenovo, 4, 5, 0, 0]
    [C:\Program Files\ThinkPad\ConnectUtilities\Res\SC\SvcHlprRes.dll]  [Lenovo, 4, 4, 0, 0]
[PID: 2260 / SYSTEM][C:\Program Files\Apoint2K\Apoint.exe]  [Alps Electric Co., Ltd., 7.0.1601.49]
    [C:\Windows\system32\VXDIF.DLL]  [Alps Electric Co., Ltd., 7.0.1601.16]
    [C:\Program Files\Apoint2K\Apoint.DLL]  [Alps Electric Co., Ltd., 7.0.1601.70]
    [C:\Program Files\Apoint2K\EzAuto.dll]  [Alps Electric Co., Ltd., 5.5.1.91]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
[PID: 2176 / SYSTEM][C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\KSWebShield.exe]  [Kingsoft Corporation, 2010,06,08,208]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
[PID: 2208 / Rita][C:\Windows\system32\taskeng.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
    [C:\Windows\system32\igfxTMM.dll]  [Intel Corporation, 7.14.10.1591]
    [C:\Windows\system32\igfxdev.dll]  [Intel Corporation, 7.14.10.1591]
[PID: 2324 / Rita][C:\Windows\system32\Dwm.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
    [C:\Windows\system32\igdumdx32.dll]  [Intel Corporation, 7.15.10.1591]
    [C:\Windows\system32\igdumd32.dll]  [Intel Corporation, 7.15.10.1591]
[PID: 2532 / SYSTEM][C:\Program Files\Apoint2K\ApMsgFwd.exe]  [Alps Electric Co., Ltd., 7, 0, 1600, 9]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
[PID: 3012 / SYSTEM][C:\Program Files\Lenovo\ATK Hotkey\LCONTROL.exe]  [ATK0101, 1043, 2, 31, 90]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
[PID: 3120 / SYSTEM][C:\Program Files\Lenovo\ATK Hotkey\LFKA.exe]  [Lenovo, 1.0.0.8]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
[PID: 2484 / SYSTEM][C:\Program Files\Apoint2K\Apntex.exe]  [Alps Electric Co., Ltd., 7.0.1.26]
    [C:\Windows\system32\VXDIF.DLL]  [Alps Electric Co., Ltd., 7.0.1601.16]
    [C:\Program Files\Apoint2K\Apoint.DLL]  [Alps Electric Co., Ltd., 7.0.1601.70]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
[PID: 1624 / Rita][C:\Windows\Explorer.EXE]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
    [C:\Windows\system32\Ku6Kss.dll]  [酷6网（北京）信息技术有限公司, 1, 0, 0, 1]
    [C:\Windows\system32\btncopy.dll]  [Broadcom Corporation., 6.1.0.4500]
    [C:\Program Files\Lenovo\Drag-to-Disc\Shellex.dll]  [Roxio, 9.0.5.27]
    [C:\Windows\system32\DLAAPI_W.DLL]  [N/A, ]
    [C:\Program Files\Lenovo\Drag-to-Disc\ShellRes.dll]  [Roxio, 9.0.5.27]
    [C:\PROGRA~1\ThinkPad\UTILIT~1\PWMTR32V.DLL]  [Lenovo Group Limited, 1, 0, 0, 0]
    [C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c178a139ee2a7ed\MFC80U.DLL]  [Microsoft Corporation, 8.00.50727.762]
    [C:\Windows\WinSxS\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.762_none_43efccf17831d131\MFC80CHS.DLL]  [Microsoft Corporation, 8.00.50727.762]
    [C:\PROGRA~1\ThinkPad\UTILIT~1\SC\PWMRT32V.DLL]  [N/A, ]
    [C:\PROGRA~1\ThinkPad\UTILIT~1\PWMIF32V.DLL]  [Lenovo Group Limited, 1, 0, 0, 0]
    [C:\Windows\system32\Sensor.dll]  [Lenovo., 1.60.0.6]
    [C:\Program Files\Thunder Network\WebThunder\WebThunderBHO_Now.dll]  [Thunder Networking Technologies,LTD, 5, 0, 8, 121]
    [C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll]  [Thunder Networking Technologies,LTD, 5, 0, 8, 120]
    [C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DsBho_00.dll]  [深圳市迅雷网络技术有限公司, 1, 0, 0, 20]
    [C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DataProcessor_00.dll]  [深圳市迅雷网络技术有限公司, 1, 0, 0, 16]
    [C:\Windows\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Windows\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll]  [Thunder Networking Technologies,LTD, 1.0.5.34]
    [C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll]  [Adobe Systems Incorporated, 8.0.0.2006102200]
    [C:\Program Files\WinRAR\rarext.dll]  [, ]
    [C:\Program Files\Roxio\Virtual Drive 10\DC_ShellExt.dll]  [Sonic Solutions, 10.1.1.94]
    [C:\Windows\system32\RavExt.dll]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.1]
    [C:\QvodPlayer\QvodBand.dll]  [Shenzhen QVOD Technology Co.,Ltd, 3, 0, 0, 0]
    [C:\Program Files\AliWangWang\AliIMExt.dll]  [Alibaba software (Shanghai) Corporation., 1.0.0.1]
    [C:\Program Files\Tudou\iTudou\TudouUpload.dll]  [www.Tudou.com, 1.1.0.0]
    [C:\Program Files\Lenovo\ATK Hotkey\AGFNEX.dll]  [, 2.0.0.4]
[PID: 3936 / Rita][C:\Windows\system32\rundll32.exe]  [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Windows\system32\Ku6Kss.dll]  [酷6网（北京）信息技术有限公司, 1, 0, 0, 1]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
    [C:\Windows\system32\Macromed\Flash\Flash10h.ocx]  [Adobe Systems, Inc., 10,1,53,64]
[PID: 3908 / Rita][C:\Program Files\Windows Defender\MSASCui.exe]  [Microsoft Corporation, 1.1.1600.0]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
[PID: 3468 / Rita][C:\Windows\System32\TpShocks.exe]  [Lenovo., 1.61.0.1]
    [C:\Program Files\ThinkPad\TpShocks\MUI\0804\TpShocks.dll]  [, ]
    [C:\Windows\System32\Sensor.dll]  [Lenovo., 1.60.0.6]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
[PID: 2528 / Rita][C:\Windows\System32\igfxtray.exe]  [Intel Corporation, 7.14.10.1591]
    [C:\Windows\System32\hccutils.DLL]  [Intel Corporation, 7.14.10.1591]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
    [C:\Windows\system32\igfxsrvc.dll]  [Intel Corporation, 7.14.10.1591]
    [C:\Windows\system32\igfxrCHS.lrc]  [Intel Corporation, 7.14.10.1591]
    [C:\Windows\System32\igfxress.dll]  [Intel Corporation, 7.14.10.1591]
[PID: 2712 / Rita][C:\Windows\System32\hkcmd.exe]  [Intel Corporation, 7.14.10.1591]
    [C:\Windows\System32\hccutils.DLL]  [Intel Corporation, 7.14.10.1591]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
    [C:\Windows\system32\igfxsrvc.dll]  [Intel Corporation, 7.14.10.1591]
    [C:\Windows\system32\igfxrCHS.lrc]  [Intel Corporation, 7.14.10.1591]
    [C:\Windows\system32\SOGOUPY.IME]  [Sogou.com Inc., 5.0.1.4185]
[PID: 1128 / Rita][C:\Windows\System32\igfxpers.exe]  [Intel Corporation, 7.14.10.1591]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
    [C:\Windows\system32\igfxsrvc.dll]  [Intel Corporation, 7.14.10.1591]
[PID: 4076 / Rita][C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe]  [Lenovo Group Limited, 4,21,10,0]
    [C:\Windows\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Windows\system32\MFC71U.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Windows\system32\MFC71CHS.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Common Files\Lenovo\ui.dll]  [Lenovo Group Limited, 4,21,11,0]
    [c:\Program Files\Common Files\Lenovo\CDRecord.dll]  [N/A, ]
    [C:\Program Files\Common Files\Lenovo\rr_res.dll]  [Lenovo Limited Group Corporation, 4,21,11,0]
    [c:\Program Files\Common Files\Lenovo\tvt_think_res.dll]  [Lenovo Group Limited, 6.02.0010.00]
    [C:\Program Files\Lenovo\Rescue and Recovery\rnr_think_res.dll]  [Lenovo Group Limited, 4,21,4,0]
    [C:\Windows\system32\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]
[PID: 2160 / Rita][C:\Program Files\Lenovo\Drag-to-Disc\DrgToDsc.exe]  [Roxio, 9.0.5.27]
    [C:\Program Files\Lenovo\Drag-to-Disc\AS_Storage_w32.dll]  [Sonic Solutions, 3.4.44.500]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
    [C:\Program Files\Lenovo\Drag-to-Disc\D2DRes.dll]  [Roxio, 9.0.5.27]
    [C:\Program Files\Common Files\Roxio Shared\DLLShared\apm.dll]  [Sonic Solutions, 10.1.1.91]
    [C:\Windows\system32\ATL71.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Windows\system32\DLAAPI_W.DLL]  [N/A, ]
    [C:\Windows\system32\CDRTC.DLL]  [Sonic Solutions, 9.0.1.6]
    [C:\Windows\system32\cdral.DLL]  [Sonic Solutions, 9.0.1.6]
[PID: 528 / Rita][C:\Program Files\Lenovo\LenovoCare\LPMGR.EXE]  [Lenovo Group Limited, 3, 0, 0, 0]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
    [C:\PROGRA~1\Lenovo\LENOVO~2\SC\LPRESMGR.DLL]  [Lenovo Group Limited, 3, 0, 0, 0]
    [C:\Windows\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Windows\system32\MFC71U.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Windows\system32\MFC71CHS.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\ThinkPad\ConnectUtilities\Res\SC\TrayRes.dll]  [Lenovo, 4, 5, 0, 0]
[PID: 576 / Rita][C:\Program Files\Lenovo\LenovoCare\LPMLCHK.EXE]  [Lenovo Group Limited, 3, 0, 0, 0]
    [C:\Program Files\Lenovo\LenovoCare\SSLEAY32.dll]  [The OpenSSL Project, http://www.openssl.org/, 0.9.8e]
    [C:\Program Files\Lenovo\LenovoCare\LIBEAY32.dll]  [The OpenSSL Project, http://www.openssl.org/, 0.9.8e]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
[PID: 2628 / Rita][C:\Windows\System32\rundll32.exe]  [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\PROGRA~1\ThinkPad\UTILIT~1\PWMTR32V.DLL]  [Lenovo Group Limited, 1, 0, 0, 0]
    [C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c178a139ee2a7ed\MFC80U.DLL]  [Microsoft Corporation, 8.00.50727.762]
    [C:\Windows\WinSxS\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.762_none_43efccf17831d131\MFC80CHS.DLL]  [Microsoft Corporation, 8.00.50727.762]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
    [C:\PROGRA~1\ThinkPad\UTILIT~1\SC\PWMRT32V.DLL]  [N/A, ]
    [C:\PROGRA~1\ThinkPad\UTILIT~1\PWMIF32V.DLL]  [Lenovo Group Limited, 1, 0, 0, 0]
    [C:\Windows\System32\Sensor.dll]  [Lenovo., 1.60.0.6]
    [C:\Windows\System32\OEMDSPIF.DLL]  [Intel Corporation, 7.14.10.1591]
    [C:\Windows\system32\igfxdev.dll]  [Intel Corporation, 7.14.10.1591]
    [C:\Program Files\Lenovo\ATK Hotkey\AGFNEX.dll]  [, 2.0.0.4]
    [C:\PROGRA~1\ThinkPad\UTILIT~1\ATM.DLL]  [Lenovo Japan, 1, 3, 4, 0]
[PID: 3812 / Rita][C:\Program Files\ThinkPad\ConnectUtilities\ACTray.exe]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcLocSettings.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\ThinkPad\ConnectUtilities\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACGUIHlpr.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcSvcStub.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACHelper.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgr.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcCryptHlpr.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\MFC71U.DLL]  [Microsoft Corporation, 7.10.5057.0]
    [C:\Windows\system32\MFC71CHS.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\ThinkPad\ConnectUtilities\Res\SC\GUIHlprRes.dll]  [Lenovo, 4, 5, 0, 0]
    [C:\Program Files\ThinkPad\ConnectUtilities\Res\SC\TrayRes.dll]  [Lenovo, 4, 5, 0, 0]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]

[PID: 2340 / Rita][C:\Program Files\ThinkPad\ConnectUtilities\ACWLIcon.exe]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcLocSettings.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\ThinkPad\ConnectUtilities\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACGUIHlpr.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcSvcStub.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACHelper.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgr.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcCryptHlpr.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\MFC71U.DLL]  [Microsoft Corporation, 7.10.5057.0]
    [C:\Windows\system32\MFC71CHS.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\ThinkPad\ConnectUtilities\Res\SC\GUIHlprRes.dll]  [Lenovo, 4, 5, 0, 0]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
    [C:\Program Files\ThinkPad\ConnectUtilities\Res\SC\IconRes.dll]  [Lenovo, 4, 0, 0, 0]
[PID: 3524 / Rita][C:\Program Files\Lenovo\Client Security Solution\cssauth.exe]  [Lenovo Group Limited, 8.20.0015.00]
    [C:\Windows\system32\cssuserdatadispatcher.dll]  [Lenovo Group Limited, 8.02.0013.00]
    [C:\Program Files\Lenovo\Client Security Solution\csswait.dll]  [Lenovo Group Limited, 8.02.0013.00]
    [C:\Program Files\Lenovo\Client Security Solution\css_banner.dll]  [Lenovo Group Limited, 8.02.0013.00]
    [C:\Program Files\Lenovo\Client Security Solution\cssdlgpwentry.dll]  [Lenovo Group Limited, 8.02.0013.00]
    [C:\Program Files\Lenovo\Client Security Solution\dlganswerprompt.dll]  [Lenovo Group Limited, 8.02.0013.00]
    [C:\Windows\system32\tvttsp.dll]  [Lenovo, 8.02.0009.00]
    [C:\Windows\system32\tcsrpc.dll]  [Lenovo, 8.02.0009.00]
    [c:\Program Files\Common Files\Lenovo\tvt_think_res.dll]  [Lenovo Group Limited, 6.02.0010.00]
    [C:\Program Files\Lenovo\Client Security Solution\css_think_res.dll]  [Lenovo Group Limited, 8.02.0013.00]
    [C:\Program Files\Lenovo\Client Security Solution\css_strings.dll]  [Lenovo Group Limited, 8.02.0013.00]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
[PID: 2536 / Rita][C:\Windows\WindowsMobile\wmdSync.exe]  [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
[PID: 3184 / Rita][C:\Program Files\Rising\Rav\RsTray.exe]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.11]
    [C:\Program Files\Rising\Rav\comserv.dll]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.15]
    [C:\Program Files\Rising\Rav\rslang.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1]
    [C:\Program Files\Rising\Rav\comx3.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    [C:\Program Files\Rising\Rav\Syslay.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    [C:\Program Files\Rising\Rav\ProcComm.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4]
    [C:\Program Files\Rising\Rav\rsxml.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    [C:\Program Files\Rising\Rav\MonState.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    [C:\Program Files\Rising\Rav\ScanEvnt.dll]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.3]
    [C:\Program Files\Rising\Rav\rsguilib.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 57]
    [C:\Program Files\Rising\Rav\rsconf.dll]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.1]
    [C:\Program Files\Rising\Rav\rspalvd.dll]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.7]
    [C:\Program Files\Rising\Rav\ravbintl.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 22]
    [C:\Program Files\Rising\Rav\mruleui.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 7]
    [C:\Program Files\Rising\Rav\MonTray.dll]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.74]
    [C:\Program Files\Rising\Rav\RavITray.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6]
    [C:\Program Files\Rising\Rav\rsmginfo.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4]
    [C:\Program Files\Rising\Rav\scanleak.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6]
    [C:\Program Files\Rising\Rav\ravppops.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 21]
    [C:\Program Files\Rising\Rav\RSAPPMGR.dll]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.0]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.0]
    [C:\Program Files\Rising\Rav\PngDll.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4]
    [C:\Program Files\Rising\Rav\ScanPrxy.dll]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.4]
[PID: 1380 / Rita][C:\Program Files\Windows Sidebar\sidebar.exe]  [Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840)]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 32]
    [C:\Windows\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Windows\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Windows\system32\igdumdx32.dll]  [Intel Corporation, 7.15.10.1591]
    [C:\Windows\system32\igdumd32.dll]  [Intel Corporation, 7.15.10.1591]
    [C:\Windows\system32\icm32.dll]  [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 3516 / Rita][C:\Program Files\Windows Live\Messenger\msnmsgr.exe]  [Microsoft Corporation, 14.0.8089.0726]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
[PID: 1144 / Rita][C:\Program Files\Windows Media Player\wmpnscfg.exe]  [Microsoft Corporation, 11.0.6000.6324 (vista_rtm.061101-2205)]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
[PID: 4188 / Rita][C:\Users\Rita\AppData\Roaming\Maxthon2\Maxthon.exe]  [Maxthon International ltd., 2, 5, 13, 166]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\MxPp.dll]  [Maxthon International ltd., 1, 0, 0, 333]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\MxSk.dll]  [Maxthon, 1, 0, 0, 575]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\MxHttpRq.dll]  [Maxthon International ltd., 2, 0, 0, 9]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\MxProxy2.dll]  [Maxthon International ltd., 1, 0, 0, 4447]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\MxUI.dll]  [Maxthon International ltd., 3, 3, 1, 30]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\MxAccount.dll]  [Maxthon International ltd., 1, 0, 2, 5]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\MxTool.dll]  [, 1, 0, 0, 3]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\maxzlib.dll]  [, 1.2.3]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kdump.dll]  [Kingsoft Corporation, 2010,06,25,1157]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 32]
    [C:\Windows\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Windows\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswbc.dll]  [Kingsoft Corporation, 2010,07,07,14]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\MxCrashCatch.dll]  [Maxthon International ltd., 2, 0, 0, 28]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\mxtool2.dll]  [, 1, 0, 0, 1]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxSandBox\MxSec.dll]  [Maxthon International ltd., 1, 0, 0, 19]
    [C:\Windows\system32\Ku6Kss.dll]  [酷6网（北京）信息技术有限公司, 1, 0, 0, 1]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\MxFav.dll]  [Maxthon International ltd., 2, 0, 0, 174]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxWebBoost\MxWebBoost.dll]  [Maxthon, 1,0,2,1269]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\mxdb.dll]  [Max, 3, 5, 3, 125]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxHistory\MxHistory.dll]  [Maxthon International ltd., 1, 0, 0, 320]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxVideoPopup\MxVideoPopup.dll]  [Maxthon International ltd., 1, 0, 0, 13]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxUrlSec\MxUrlSec.dll]  [Maxthon International ltd., 1, 0, 0, 13]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxPageSearch\MxPageSearch.dll]  [Maxthon International ltd., 1,0,0,1892]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxMute\MxMute.dll]  [Maxthon International ltd., 1, 0, 0, 11]
    [C:\Windows\system32\igdumdx32.dll]  [Intel Corporation, 7.15.10.1591]
    [C:\Windows\system32\igdumd32.dll]  [Intel Corporation, 7.15.10.1591]
    [C:\Windows\system32\Macromed\Flash\Flash10h.ocx]  [Adobe Systems, Inc., 10,1,53,64]
    [C:\Program Files\Common Files\PPLiveNetwork\kernel\PPHookShell.dll]  [PPTV, 1.1.0.5]
    [C:\Windows\system32\SOGOUPY.IME]  [Sogou.com Inc., 5.0.1.4185]
    [C:\Windows\system32\MFPlat.DLL]  [Microsoft Corporation, 11.0.6002.18005 (lh_sp2rtm.090410-1830)]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxSpellCheck\MxSpellCheck.dll]  [, 1, 0, 0, 71]
[PID: 4248 / NETWORK SERVICE][C:\Program Files\Windows Media Player\wmpnetwk.exe]  [Microsoft Corporation, 11.0.6000.6324 (vista_rtm.061101-2205)]
    [C:\Windows\system32\MFPlat.DLL]  [Microsoft Corporation, 11.0.6002.18005 (lh_sp2rtm.090410-1830)]
    [C:\Windows\system32\WMDRMSDK.DLL]  [Microsoft Corporation, 11.0.6002.18005]
[PID: 4348 / Rita][C:\Program Files\Tencent\QQ\Bin\QQ.exe]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\Common.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Windows\WinSxS\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.762_none_11ecb0ab9b2caf3c\ATL80.DLL]  [Microsoft Corporation, 8.00.50727.762]
    [C:\Program Files\Tencent\QQ\Bin\KernelUtil.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\GF.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
    [C:\Program Files\Tencent\QQ\Bin\AppUtil.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\MainFrame.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\TaskTray.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\IM.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Common Files\Tencent\TXSSO\Bin\SSOPlatform.dll]  [Tencent, 1.2.1.6]
    [C:\Program Files\Common Files\Tencent\TXSSO\Bin\SSOCommon.DLL]  [Tencent, 1.2.1.5]
    [C:\Program Files\Tencent\QQ\Bin\BasicCtrlDll.dll]  [TENCENT, 8,0,773,1801]
    [C:\Program Files\Tencent\QQ\Bin\TXPFProxy.dll]  [N/A, ]
    [C:\Program Files\Tencent\QQ\Bin\AppMisc.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\ChatFrame.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\ConfigCenter.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\CustomFace.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\KernelMisc.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\LongCnn.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\ContactInfoFrame.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\MsgMgr.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\SkinMgr.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\QInterLive.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\AppCtrl.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\SystemMsg.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.PaiPai\Bin\PaiPai.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.AudioVideo\Bin\AudioVideo.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.MMOG\Bin\MMOG.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.Soso\Bin\Soso.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.Qzone\Bin\Qzone.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.Weather\Bin\Weather.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.SoBar\Bin\SoBar.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.PaiPaiGift\Bin\PaiPaiGift.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.QQLive\Bin\QQLive.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.QQMusic\Bin\QQMusic.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.taotao\Bin\Taotao.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.QQShow\Bin\FlashAvatarDll.dll]  [Tencent, 1.26.1.26]
    [C:\Windows\system32\Macromed\Flash\Flash10h.ocx]  [Adobe Systems, Inc., 10,1,53,64]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 32]
    [C:\Windows\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Windows\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.advertisement\Bin\Advertisement.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.snsapp\Bin\SNSApp.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.NetBar\Bin\NetBar.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.wireless\Bin\Wireless.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.qqshow\Bin\QQShow.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.wenwen\Bin\WenWen.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.qqgame\Bin\QQGame.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.mail\Bin\Mail.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.crm\Bin\CRM.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.paycenter\Bin\PayCenter.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.qqring\Bin\QQRing.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.qbar\Bin\QBar.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.qqpet\Bin\QQPet.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.qqvip\Bin\QQVip.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.today\Bin\Today.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.memo\Bin\Memo.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\InformationBox.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\vqqsdl.dll]  [Tencent, 5, 0, 3, 24]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.qqwebsite\Bin\QQWebsite.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.filetransfer\Bin\FileTransfer.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\GroupApp.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Windows\System32\l3codeca.acm]  [Fraunhofer Institut Integrierte Schaltungen IIS, 1, 9, 0, 0401]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.gamelife\Bin\GameLife.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Windows\system32\igdumdx32.dll]  [Intel Corporation, 7.15.10.1591]
    [C:\Windows\system32\igdumd32.dll]  [Intel Corporation, 7.15.10.1591]
    [C:\Program Files\Tencent\QQ\Bin\AppCom.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\AddrSearch.dll]  [Tencent, 2, 3, 10, 12]
    [C:\Windows\system32\SOGOUPY.IME]  [Sogou.com Inc., 5.0.1.4185]
    [C:\Windows\system32\Ku6Kss.dll]  [酷6网（北京）信息技术有限公司, 1, 0, 0, 1]

[PID: 4364 / LOCAL SERVICE][C:\Windows\system32\svchost.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 4892 / Rita][C:\Program Files\Tencent\QQ\Bin\TXPlatform.exe]  [Tencent, 1, 26, 760, 0]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
    [C:\Program Files\Tencent\QQ\Bin\TXPFProxy.dll]  [N/A, ]
[PID: 5168 / Rita][C:\Windows\system32\igfxsrvc.exe]  [Intel Corporation, 7.14.10.1591]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
    [C:\Windows\system32\igfxsrvc.dll]  [Intel Corporation, 7.14.10.1591]
    [C:\Windows\system32\igfxdev.dll]  [Intel Corporation, 7.14.10.1591]
[PID: 5340 / Rita][C:\Program Files\Common Files\PPLiveNetwork\PPAP.exe]  [PPLive Corporation, 2, 3, 0, 2]
    [C:\Program Files\Common Files\PPLiveNetwork\MngModule.dll]  [, 1, 7, 0, 26]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
    [C:\Program Files\PPLive\PPTV\plugout\client_ap.dll]  [PPTV, 1.0.0.23]
    [C:\Program Files\Common Files\PPLiveNetwork\kernel\sop.dll]  [Synacast, 1.1.0.9]
    [C:\Program Files\Common Files\PPLiveNetwork\kernel\live\live.dll]  [Synacast, 1, 3, 1, 4]
    [C:\Program Files\Common Files\PPLiveNetwork\kernel\Send_Log_Kernel_Module.dll]  [Synacast, 1.0.0.6]
    [C:\Program Files\Common Files\PPLiveNetwork\TipsClient.dll]  [, 1, 0, 2, 3]
    [C:\Program Files\Common Files\PPLiveNetwork\kernel\Hookkernel.dll]  [Synacast, 1.1.0.22]
    [C:\Program Files\Common Files\PPLiveNetwork\kernel\peer.dll]  [Synacast, 1, 5, 3, 9]
    [C:\Program Files\Common Files\PPLiveNetwork\kernel\PPHookShell.dll]  [PPTV, 1.1.0.5]
[PID: 5768 / Rita][C:\Program Files\Lenovo\Camera Center\bin\LenovoCameraCenter.exe]  [Lenovo, 1.0.0.0]
    [C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\894183c0c47bd4772fbfad4c1a7e3b71\mscorlib.ni.dll]  [Microsoft Corporation, 2.0.50727.4200 (NetFxQFE.050727-4200)]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
    [C:\Windows\assembly\NativeImages_v2.0.50727_32\System\b8e4a9556d3ddd49ec70aae0516c2007\System.ni.dll]  [Microsoft Corporation, 2.0.50727.4205 (VistaSP2GDR.050727-4200)]
    [C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\64b4c60e1b2b417000db5d8c2828a53f\System.Drawing.ni.dll]  [Microsoft Corporation, 2.0.50727.4016 (NetFxQFE.050727-4000)]
    [C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\9c6fe9d44d22834993e9aa23cc9dc272\System.Windows.Forms.ni.dll]  [Microsoft Corporation, 2.0.50727.4016 (NetFxQFE.050727-4000)]
    [C:\Program Files\Lenovo\Camera Center\bin\CameraApplicationLaunchPadLibrary.dll]  [, 1.0.0.0]
    [C:\Program Files\Lenovo\Camera Center\bin\ApplicationLogger.dll]  [lenovo, 1.0.0.0]
    [C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\f4e9769eaf42b9c2c0d795b1a99c3dbc\System.Xml.ni.dll]  [Microsoft Corporation, 2.0.50727.4016 (NetFxQFE.050727-4000)]
    [C:\Program Files\Lenovo\Camera Center\bin\CameraApplicationLaunchPadDataObjects.dll]  [, 1.0.0.0]
    [C:\Program Files\Lenovo\Camera Center\bin\CameraApplicationLaunchPadSettings.dll]  [lenovo, 1.0.0.0]
    [C:\Program Files\Lenovo\Camera Center\bin\CameraApplicationLaunchPadSettingsNotifyIcon.dll]  [lenovo, 1.0.0.0]
    [C:\Program Files\Lenovo\Camera Center\bin\BrandingInfo.dll]  [lenovo, 1.0.0.0]
    [C:\Program Files\Lenovo\Camera Center\bin\CameraApplicationLaunchPadResources.dll]  [lenovo, 1.0.0.0]
    [C:\Program Files\Lenovo\Camera Center\bin\LocalizationWrapper.dll]  [, 1.0.0.0]
    [C:\Program Files\Lenovo\Camera Center\bin\zh-CHS\LocalizationWrapper.resources.dll]  [, 1.0.0.0]
    [C:\Program Files\Lenovo\Camera Center\bin\CameraApplicationLaunchPadGui.dll]  [lenovo, 1.0.0.0]
[PID: 5792 / Rita][C:\Program Files\Windows Sidebar\sidebar.exe]  [Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840)]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 32]
    [C:\Windows\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Windows\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
[PID: 1908 / Rita][C:\Program Files\ThinkPad\ConnectUtilities\ACGadgetWrapper.exe]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcLocSettings.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\ThinkPad\ConnectUtilities\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACHelper.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACGUIHlpr.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcSvcStub.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgr.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcCryptHlpr.dll]  [Lenovo, 5.20]
    [C:\Program Files\ThinkPad\ConnectUtilities\MFC71U.DLL]  [Microsoft Corporation, 7.10.5057.0]
    [C:\Windows\system32\MFC71CHS.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\ThinkPad\ConnectUtilities\Res\SC\GUIHlprRes.dll]  [Lenovo, 4, 5, 0, 0]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
[PID: 5116 / SYSTEM][c:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe]  [Lenovo Group Limited, 8.02.0009.00]
[PID: 4828 / Rita][C:\PROGRA~1\ThinkPad\UTILIT~1\PWMUIAux.exe]  [Lenovo Group Limited, 1.0.0.0]
    [C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\894183c0c47bd4772fbfad4c1a7e3b71\mscorlib.ni.dll]  [Microsoft Corporation, 2.0.50727.4200 (NetFxQFE.050727-4200)]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
    [C:\Windows\assembly\NativeImages_v2.0.50727_32\System\b8e4a9556d3ddd49ec70aae0516c2007\System.ni.dll]  [Microsoft Corporation, 2.0.50727.4205 (VistaSP2GDR.050727-4200)]
    [C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\7f4e2ded203a366244d61ee0af84a2d3\WindowsBase.ni.dll]  [Microsoft Corporation, 3.0.6920.4016 built by: VistaSP2GDR]
    [C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\d786572e9e7270cbf3604f4a34d9244e\PresentationCore.ni.dll]  [Microsoft Corporation, 3.0.6920.4016 built by: VistaSP2GDR]
    [C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\0832f9155d800cb802e70409447c1128\PresentationFramework.ni.dll]  [Microsoft Corporation, 3.0.6920.4016 built by: VistaSP2GDR]
    [C:\Program Files\ThinkPad\Utilities\zh-CN\PWMUIAux.resources.dll]  [N/A, ]
    [C:\Program Files\ThinkPad\Utilities\PWMUICtl.dll]  [Lenovo Group Limited, 1.0.0.0]
    [C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c178a139ee2a7ed\MFC80U.DLL]  [Microsoft Corporation, 8.00.50727.762]
    [C:\Windows\WinSxS\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.762_none_43efccf17831d131\MFC80CHS.DLL]  [Microsoft Corporation, 8.00.50727.762]
    [C:\PROGRA~1\ThinkPad\UTILIT~1\SC\PWMROV.DLL]  [N/A, ]
    [C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\64b4c60e1b2b417000db5d8c2828a53f\System.Drawing.ni.dll]  [Microsoft Corporation, 2.0.50727.4016 (NetFxQFE.050727-4000)]
    [C:\Windows\system32\igdumdx32.dll]  [Intel Corporation, 7.15.10.1591]
    [C:\Windows\system32\igdumd32.dll]  [Intel Corporation, 7.15.10.1591]
    [C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\2de8703db894217915906f081ac3c8b0\PresentationFramework.Aero.ni.dll]  [Microsoft Corporation, 3.0.6920.4000 built by: QFE]
    [C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\af2c855fe34c856715fcbe4bd4e07cc1\PresentationFramework.Luna.ni.dll]  [Microsoft Corporation, 3.0.6920.4000 built by: QFE]
[PID: 5324 / Rita][C:\Windows\system32\wuauclt.exe]  [(Verified) Microsoft Corporation, 7.4.7600.226 (winmain_wtr_wsus3sp2(wmbla).090806-1834)]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
[PID: 7080 / Rita][C:\Program Files\Rising\Rav\rsmain.exe]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.4]
    [C:\Program Files\Rising\Rav\rspalmgr.dll]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.24]
    [C:\Program Files\Rising\Rav\RSXML.DLL]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    [C:\Program Files\Rising\Rav\RsGuiLib.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 57]
    [C:\Program Files\Rising\Rav\rslang.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1]
    [C:\Program Files\Rising\Rav\rsconf.dll]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.1]
    [C:\Program Files\Rising\Rav\rspalvd.dll]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.7]
    [C:\Program Files\Rising\Rav\ravppops.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 21]
    [C:\Program Files\Rising\Rav\ravbintl.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 22]
    [C:\Program Files\Rising\Rav\Syslay.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    [C:\Program Files\Rising\Rav\ravpsafe.dll]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.31]
    [C:\Program Files\Rising\Rav\MonState.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    [C:\Program Files\Rising\Rav\ScanPrxy.dll]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.4]
    [C:\Program Files\Rising\Rav\pubcfg.dll]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.57]
    [C:\Program Files\Rising\Rav\rsscanbd.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    [C:\Program Files\Rising\Rav\PngDll.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4]
    [C:\Program Files\Rising\Rav\RSAPPMGR.dll]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.0]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.0]
    [C:\Program Files\Rising\Rav\comx3.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    [C:\Program Files\Rising\Rav\ProcComm.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4]
    [C:\Program Files\Rising\Rav\ravxpage.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 54]
    [C:\Program Files\Rising\Rav\ravxmons.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 16]
    [C:\Program Files\Rising\Rav\ravptool.dll]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.15]
    [C:\Program Files\Rising\Rav\log2file.dll]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.15]
    [C:\Program Files\Rising\Rav\htmllib.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2]
    [C:\Windows\system32\Ku6Kss.dll]  [酷6网（北京）信息技术有限公司, 1, 0, 0, 1]
[PID: 7056 / Rita][C:\Program Files\Rising\Rav\RsAgent.exe]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.19]
    [C:\Program Files\Rising\Rav\ProcComm.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4]
    [C:\Program Files\Rising\Rav\comx3.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    [C:\Program Files\Rising\Rav\Syslay.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    [C:\Program Files\Rising\Rav\ScanPrxy.dll]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.4]
[PID: 6560 / Rita][C:\Windows\MSAgent\agentsvr.exe]  [(Verified) Microsoft Corporation, 5.2.3790.1241]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
[PID: 6728 / Rita][C:\Program Files\Tencent\QQDownload\QQDownload.exe]  [Tencent Technology (Shenzhen) Company Limited, 2, 7, 627, 627]
    [C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c178a139ee2a7ed\MFC80.DLL]  [Microsoft Corporation, 8.00.50727.762]
    [C:\Windows\WinSxS\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.762_none_43efccf17831d131\MFC80CHS.DLL]  [Microsoft Corporation, 8.00.50727.762]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
    [C:\Program Files\Tencent\QQDownload\xmain.dll]  [Tencent Technology (Shenzhen) Company Limited, 1.9.287.287]
    [C:\Program Files\Tencent\QQDownload\QQDownloadSkin.dll]  [TODO: <Company name>, 1.0.0.1]
    [C:\Windows\WinSxS\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.762_none_11ecb0ab9b2caf3c\ATL80.DLL]  [Microsoft Corporation, 8.00.50727.762]
    [C:\Windows\system32\Ku6Kss.dll]  [酷6网（北京）信息技术有限公司, 1, 0, 0, 1]
    [C:\Program Files\Tencent\QQDownload\VBScript.dll]  [Microsoft Corporation, 5.6.0.7426]
    [C:\Program Files\Common Files\Tencent\TXSSO\Bin\SSOLUIControl.dll]  [Tencent, 1.0.1.5]
    [C:\Program Files\Common Files\Tencent\TXSSO\Bin\SSOCommon.DLL]  [Tencent, 1.2.1.5]
    [C:\Program Files\Common Files\Tencent\TXSSO\Bin\SSOPlatform.dll]  [Tencent, 1.2.1.6]
    [C:\Program Files\Tencent\QQDownload\xdownload.dll]  [Tencent Technology (Shenzhen) Company Limited, 1.9.348.348]
    [C:\Program Files\Tencent\QQDownload\xcore.dll]  [Tencent Technology(Shenzhen) Company Limited, 2, 1, 101, 90]
    [C:\Program Files\Tencent\QQDownload\SafePlugins\Rav\rsscan.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3]
[PID: 6344 / Rita][C:\Windows\system32\NOTEPAD.EXE]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
[PID: 6200 / Rita][C:\0 dld\software\sreng2\SREngLdr.EXE]  [Smallfrogs Studio, 2.8.2.1321]
[PID: 6920 / Rita][C:\0 dld\software\sreng2\SRE65f043b7.EXE]  [Smallfrogs Studio, 2.8.2.1321]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kwsui.dll]  [Kingsoft Corporation, 2010,07,05,10]
    [C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll]  [Kingsoft Corporation, 2010,07,10,16]
    [C:\0 dld\software\sreng2\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["%SystemRoot%\hh.exe" %1]
.HLP  OK. [%SystemRoot%\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. ["%SystemRoot%\System32\WScript.exe" "%1" %*]
.JS  Error. [C:\Windows\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost
::1            localhost

==================================
进程特权扫描
N/A

==================================
计划任务
[已启用] \\GoogleUpdateTaskUserS-1-5-21-4156762292-4027623161-4130380227-1000Core
        C:\Users\Rita\AppData\Local\Google\Update\GoogleUpdate.exe /c
[已启用] \\GoogleUpdateTaskUserS-1-5-21-4156762292-4027623161-4130380227-1000UA
        C:\Users\Rita\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
[已启用] \\PCDoctorBackgroundMonitorTask
        C:\Program Files\PCDR5\pcdr5cuiw32.exe -backgroundmon scripts\backgroundmon.xml -st PCDoctorBackgroundMonitorTask
[已启用] \\PMTask
        C:\PROGRA~1\ThinkPad\UTILIT~1\PwmIdTsv.exe -backgroundmon scripts\backgroundmon.xml -st PCDoctorBackgroundMonitorTask
[已启用] \\SogouImeMgr
        C:\PROGRA~1\SOGOUI~1\501~1.418\SGTool.exe --appid=pinyinrepair /S
[已启用] \\{29BE0917-CDDA-4F09-AFDB-353B9A1E2324}
        C:\Windows\system32\pcalua.exe -a "C:\Users\Rita\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CX5YLOV9\WebThunder2009beta1[1].exe" -d C:\Users\Rita
[已禁用] \Microsoft\Windows\Active Directory Rights Management Services Client\AD RMS Rights Policy Template Management (Automated)
        N/A
[已启用] \Microsoft\Windows\Active Directory Rights Management Services Client\AD RMS Rights Policy Template Management (Manual)
        N/A
[已启用] \Microsoft\Windows\Bluetooth\UninstallDeviceTask
        BthUdTask.exe $(Arg0)
[已启用] \Microsoft\Windows\CertificateServicesClient\SystemTask
        N/A
[已启用] \Microsoft\Windows\CertificateServicesClient\UserTask
        N/A
[已启用] \Microsoft\Windows\CertificateServicesClient\UserTask-Roam
        N/A
[已启用] \Microsoft\Windows\Customer Experience Improvement Program\Consolidator
        %SystemRoot%\System32\wsqmcons.exe
[已启用] \Microsoft\Windows\Customer Experience Improvement Program\OptinNotification
        %SystemRoot%\System32\wsqmcons.exe -n 0x1C577FA2B69CAD0
[已启用] \Microsoft\Windows\Defrag\ScheduledDefrag
        %windir%\system32\defrag.exe -c -i
[已启用] \Microsoft\Windows\MobilePC\HotStart
        N/A
[已启用] \Microsoft\Windows\MobilePC\TMM
        N/A
[已启用] \Microsoft\Windows\MUI\Lpksetup
        C:\Windows\System32\lpksetup.exe -v
[已启用] \Microsoft\Windows\MUI\LPRemove
        %windir%\system32\lpremove.exe -v
[已启用] \Microsoft\Windows\MUI\Mcbuilder
        C:\Windows\System32\mcbuilder.exe -v
[已启用] \Microsoft\Windows\Multimedia\SystemSoundsService
        N/A
[已启用] \Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
        N/A
[已启用] \Microsoft\Windows\Shell\CrawlStartPages
        N/A
[已启用] \Microsoft\Windows\SystemRestore\SR
        %windir%\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation
[已启用] \Microsoft\Windows\Tcpip\IpAddressConflict1
        rundll32 ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem
[已启用] \Microsoft\Windows\Tcpip\IpAddressConflict2
        rundll32 ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem
[已启用] \Microsoft\Windows\UPnP\UPnPHostConfig
        sc.exe config upnphost start= auto
[已启用] \Microsoft\Windows\Windows Error Reporting\QueueReporting
        %windir%\system32\wermgr.exe -queuereporting
[已启用] \Microsoft\Windows\WindowsCalendar\Reminders - Rita
        C:\Program Files\Windows Calendar\WinCal.exe /reminder
[已启用] \Microsoft\Windows\Wired\GatherWiredInfo
        %windir%\system32\gatherWiredInfo.vbs
[已启用] \Microsoft\Windows\Wireless\GatherWirelessInfo
        %windir%\system32\gatherWirelessInfo.vbs

==================================
Windows 安全更新检查
KB973923,  Microsoft Visual C++ 2005 Service Pack 1 Redistributable Package 的安全更新 (KB973923) MS09-035
KB980248,  Windows Vista 更新程序 (KB980248)
KB982632,  用于 Windows Vista 的 Internet Explorer 8 兼容性视图列表的更新程序 (KB982632)
KB982519,  Windows Vista 更新程序 (KB982519)
KB968930,  用于 Windows Vista 的 Windows PowerShell 2.0 和 WinRM 2.0 (KB968930)
KB905866,  Windows Mail 垃圾邮件筛选器更新程序 [2010 年 7 月] (KB905866)
KB915597,  Definition Update for Windows Defender - KB915597 (Definition 1.87.146.0)

==================================
API HOOK
入口点错误：ShellExecuteExW (危险等级: 一般,  被下面模块所HOOK: C:\Users\Rita\AppData\Roaming\Maxthon2\Modules\MxKWS\kswebshield.dll)

==================================
隐藏进程
N/A

==================================


[/CODE]

上传完了。请高人帮忙分析分析啊。

能不能发附件啊:kaka6:

关于如何截图和以附件形式发图到论坛。
http://bbs.ikaka.com/showtopic-8616820.aspx

从日志上看没什么问题，楼主放心吧

您好，您的扫描日志没有发现明显问题。我个人认为这个安装的驱动是针对thinkpad的某项设备。

谢谢天鹰之翼和moc，这下放心一点。可我还是有点疑惑，如果是正常的驱动，显示应该为有效字符。

下次学习一下发附件。:kaka8: