[C:\WINDOWS\system32\UpdateModule.dll]  <N/A><N/A>
[PID: 624][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 776][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 836][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 904][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 956][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1032][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1092][C:\kav2005\KWatch.EXE]  <Kingsoft Corporation><2005, 11, 21, 53>
    [C:\kav2005\KAVIPC2.DLL]  <Kingsoft Corporation><2004, 12, 28, 20>
    [C:\kav2005\KAEPlat.DLL]  <Kingsoft Corp.><2004, 11, 26, 53>
    [C:\kav2005\KAEMem.DAT]  <Kingsoft><2004, 11, 9, 11>
[PID: 1164][C:\WINDOWS\system32\spoolsv.exe]  <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
    [C:\WINDOWS\system32\dlcglmpm.DLL]  < ><1.154.24.0>
    [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\dlcgPP5C.dll]  <Dell, Inc.><2.15.114.68>
[PID: 1992][C:\WINDOWS\system32\lasss.exe]  <N/A><N/A>
[PID: 2028][C:\WINDOWS\system32\nvsvc32.exe]  <NVIDIA Corporation><6.14.10.8185>
[PID: 192][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Program Files\Dell AIO 810\dlcgdrs.dll]  <Dell><2.6.65.22>
    [C:\WINDOWS\system32\dlcgcfg.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Dell AIO 810\dlcgcnv4.dll]  <N/A><N/A>
[PID: 412][C:\WINDOWS\system32\UpdateService.exe]  <N/A><N/A>
[PID: 1636][C:\WINDOWS\System32\alg.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1808][C:\WINDOWS\system32\dlcgcoms.exe]  < ><1.154.24.0>
    [C:\WINDOWS\system32\dlcgprox.dll]  < ><1.154.24.0>
    [C:\WINDOWS\system32\dlcgserv.dll]  < ><1.154.24.0>
    [C:\WINDOWS\system32\dlcgusb1.dll]  < ><1.154.24.0>
[PID: 456][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\downlo~1\Orea.dll]  <Tencent><4, 2, 5, 51>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 9>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <Yahoo! China><3, 0, 2, 1020>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  <Yahoo! China><3, 0, 9, 1015>
    [C:\kav2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\yalive.dll]  <yahoo! china><3, 2, 5, 1075>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yalliveex.dll]  <Yahoo! China><3, 0, 1, 1010>
    [C:\PROGRA~1\baidu\bar\baidubar.dll]  <Baidu.com, Inc.><2, 0, 2, 106>
[PID: 1216][C:\WINDOWS\SOUNDMAN.EXE]  <Realtek Semiconductor Corp.><5, 1, 0, 51>
    [C:\kav2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 9>
    [C:\WINDOWS\downlo~1\Orea.dll]  <Tencent><4, 2, 5, 51>
[PID: 1856][C:\WINDOWS\LHotkey.exe]  <Chicony><1. 0. 0. 1>
    [C:\WINDOWS\HKNTDLL.dll]  <N/A><N/A>
    [C:\kav2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 9>
    [C:\WINDOWS\downlo~1\Orea.dll]  <Tencent><4, 2, 5, 51>
[PID: 524][C:\kav2005\KAVStart.exe]  <Kingsoft Corporation><2005, 10, 10, 150>
    [C:\kav2005\KAVIPC2.DLL]  <Kingsoft Corporation><2004, 12, 28, 20>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  <Yahoo! China><3, 0, 9, 1015>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <Yahoo! China><3, 0, 2, 1020>
    [C:\WINDOWS\downlo~1\Orea.dll]  <Tencent><4, 2, 5, 51>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 9>
    [C:\kav2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
[PID: 3672][C:\WINDOWS\FixCamera.exe]  <><1, 0, 0, 3>
    [C:\kav2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 9>
    [C:\WINDOWS\downlo~1\Orea.dll]  <Tencent><4, 2, 5, 51>
[PID: 3884][C:\WINDOWS\tsnpstd3.exe]  <><1, 1, 3, 1>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 9>
    [C:\WINDOWS\downlo~1\Orea.dll]  <Tencent><4, 2, 5, 51>
    [C:\kav2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <Yahoo! China><3, 0, 2, 1020>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  <Yahoo! China><3, 0, 9, 1015>
[PID: 284][C:\Program Files\Dell AIO 810\dlcgmon.exe]  <Dell><2.6.65.22>
    [C:\Program Files\Dell AIO 810\dlcgscw.dll]  <Dell><2.6.65.22>
    [C:\Program Files\Dell AIO 810\dlcgcfg.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Dell AIO 810\dlcgtsfw.dll]  <><2.6.11.5>
    [C:\Program Files\Dell AIO 810\dlcgdrec.dll]  <><2.0.15.2>
    [C:\WINDOWS\downlo~1\Orea.dll]  <Tencent><4, 2, 5, 51>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <Yahoo! China><3, 0, 2, 1020>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  <Yahoo! China><3, 0, 9, 1015>
    [C:\Program Files\Dell AIO 810\dlcgcomc.dll]  < ><1.154.24.0>
    [C:\Program Files\Dell AIO 810\dlcgpplc.dll]  < ><1.154.24.0>
    [C:\WINDOWS\system32\dlcgprox.dll]  < ><1.154.24.0>
    [C:\kav2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 9>
[PID: 320][C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe]  <Yahoo! China><3, 0, 9, 1015>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  <Yahoo! China><3, 0, 9, 1015>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <Yahoo! China><3, 0, 2, 1020>
    [C:\WINDOWS\downlo~1\Orea.dll]  <Tencent><4, 2, 5, 51>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\yalive.dll]  <yahoo! china><3, 2, 5, 1075>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yalliveex.dll]  <Yahoo! China><3, 0, 1, 1010>
    [C:\kav2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 9>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Ynotifier.dll]  <yahoo! china><3, 0, 0, 1000>
[PID: 1024][C:\Program Files\Yahoo!\Assistant\yassistse.exe]  <Yahoo! China><3, 0, 0, 1001>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 9>
    [C:\WINDOWS\downlo~1\Orea.dll]  <Tencent><4, 2, 5, 51>
    [C:\Program Files\Yahoo!\Assistant\shell\yAssecblk.dll]  <Yahoo! China><3, 0, 1, 1003>
    [C:\Program Files\Yahoo!\Assistant\shell\yAsMenu.dll]  <Yahoo! China><3, 0, 0, 1001>
    [C:\Program Files\Yahoo!\Assistant\shell\yMenuInfo.dll]  <Yahoo! China><3, 0, 0, 1000>
    [C:\Program Files\Yahoo!\Assistant\shell\yIEAngel.dll]  <Yahoo! China><3, 0, 0, 1000>
    [C:\kav2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
[PID: 3016][C:\WINDOWS\system32\Rundll32.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 9>
    [C:\WINDOWS\downlo~1\Orea.dll]  <Tencent><4, 2, 5, 51>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <Yahoo! China><3, 0, 2, 1020>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  <Yahoo! China><3, 0, 9, 1015>
    [C:\WINDOWS\DOWNLO~1\CnsMinIO.dll]  <北京三七二一科技有限公司><1, 0, 3, 6>
    [C:\WINDOWS\DOWNLO~1\cnsio.dll]  <北京三七二一科技有限公司><1, 0, 2, 7>

[C:\kav2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
[PID: 2996][C:\Program Files\Common Files\Real\Update_OB\realsched.exe]  <RealNetworks, Inc.><0.1.0.3512>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <Yahoo! China><3, 0, 2, 1020>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  <Yahoo! China><3, 0, 9, 1015>
    [C:\WINDOWS\downlo~1\Orea.dll]  <Tencent><4, 2, 5, 51>
    [C:\kav2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 9>
[PID: 1768][C:\WINDOWS\system32\s3trayx.exe]  <N/A><N/A>
[PID: 2092][C:\WINDOWS\system32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\downlo~1\Orea.dll]  <Tencent><4, 2, 5, 51>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <Yahoo! China><3, 0, 2, 1020>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  <Yahoo! China><3, 0, 9, 1015>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 9>
    [C:\kav2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
[PID: 3424][C:\kav2005\KMailMon.EXE]  <Kingsoft Corporation><2005, 6, 30, 74>
    [C:\kav2005\KAntiSpm.dll]  <N/A><1, 0, 0, 2>
    [C:\kav2005\KAVIPC2.DLL]  <Kingsoft Corporation><2004, 12, 28, 20>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 9>
    [C:\WINDOWS\downlo~1\Orea.dll]  <Tencent><4, 2, 5, 51>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <Yahoo! China><3, 0, 2, 1020>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  <Yahoo! China><3, 0, 9, 1015>
    [C:\kav2005\KAECall2.DLL]  <Kingsoft Corporation><2004, 12, 28, 7>
    [C:\kav2005\KAEPlat.DLL]  <Kingsoft Corp.><2004, 11, 26, 53>
    [C:\kav2005\KAEMem.DAT]  <Kingsoft><2004, 11, 9, 11>
    [C:\kav2005\KAConfig.DLL]  <Kingsoft Corporation><2005, 3, 23, 30>
    [C:\kav2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
[PID: 3404][d:\Tencent\qq\QQ.exe]  <TENCENT><0, 0, 0, 0>
    [d:\Tencent\qq\CoralAssist.DLL]  <Coral Team><4.5.0 build 20060515>
    [d:\Tencent\qq\CoralQQ.DLL]  <Coral Team><4.5.1 Build 20060620>
    [d:\Tencent\qq\ipsearcher.dll]  <><1.0.0.3>
    [d:\Tencent\qq\QQBaseClassInDll.dll]  <><1, 0, 0, 1>
    [d:\Tencent\qq\QQHelperDll.dll]  <><1, 0, 0, 1>
    [d:\Tencent\qq\BasicCtrlDll.dll]  <Tencent><5, 0, 200, 160>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 9>
    [C:\WINDOWS\downlo~1\Orea.dll]  <Tencent><4, 2, 5, 51>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <Yahoo! China><3, 0, 2, 1020>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  <Yahoo! China><3, 0, 9, 1015>
    [C:\kav2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
    [d:\Tencent\qq\QQAPI.dll]  <><1, 0, 0, 1>
    [d:\Tencent\qq\TIMProxy.dll]  <tencent><0, 3, 2, 4>
    [d:\Tencent\qq\LoginCtrl.dll]  <><1, 0, 0, 1>
    [d:\Tencent\qq\npkcntc.dll]  <INCA Internet Co., Ltd.><2006, 3, 2, 1>
    [d:\Tencent\qq\npkpdb.dll]  <INCA Internet Co., Ltd.><2003, 10, 1, 1>
    [d:\Tencent\qq\QQRes.dll]  <tencent><1, 0, 0, 1>
    [d:\Tencent\qq\QQMainFrame.dll]  <N/A><N/A>
    [d:\Tencent\qq\CQQApplication.dll]  <N/A><N/A>
    [d:\Tencent\qq\NewSkin.dll]  <><1, 0, 0, 1>
    [d:\Tencent\qq\HostingMgr.dll]  <><1, 0, 0, 1>
    [d:\Tencent\qq\CameraDll.dll]  <><1, 0, 0, 1>
    [d:\Tencent\qq\MailSummary.dll]  <><1, 0, 0, 1>
    [d:\Tencent\qq\QQSpace.dll]  <><1, 0, 0, 1>
    [C:\WINDOWS\system32\msdmo.dll]  <N/A><N/A>
    [d:\Tencent\qq\QQGroupMng.dll]  <><1, 0, 0, 1>
    [d:\Tencent\qq\GroupLive.dll]  <N/A><N/A>
    [d:\Tencent\qq\QRingMng.dll]  <N/A><N/A>
    [d:\Tencent\qq\QQAvatar.dll]  <N/A><N/A>
    [d:\Tencent\qq\FlashAvatarDll.dll]  <><1, 4, 0, 1>
    [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx]  <Adobe Systems, Inc.><9,0,16,0>
    [d:\Tencent\qq\LongConnection.dll]  <tencent><5, 0, 200, 160>
    [d:\Tencent\qq\QQPlugin.dll]  <N/A><N/A>
    [d:\Tencent\qq\ShareFiles.dll]  <N/A><N/A>
    [d:\Tencent\qq\QQZip.dll]  <tencent><0, 3, 2, 4>
    [d:\Tencent\qq\QQSysMsgMng.dll]  <N/A><N/A>
    [d:\Tencent\qq\UserDefinedHead.dll]  <><1, 0, 0, 1>
    [d:\Tencent\qq\QQConfigPlugin.dll]  <><1, 0, 0, 1>
    [d:\Tencent\qq\QQAllInOne.dll]  <N/A><N/A>
    [d:\Tencent\qq\SCCore.dll]  <N/A><N/A>
    [d:\Tencent\qq\QQPet.dll]  <><1, 0, 0, 1>
    [d:\Tencent\qq\QQCustomFace.dll]  <N/A><N/A>
    [d:\Tencent\qq\QQSceneMng.dll]  <N/A><N/A>
    [d:\Tencent\qq\ImageOle.dll]  <TODO: <Company name>><1.0.0.1>
    [C:\WINDOWS\HKNTDLL.dll]  <N/A><N/A>
    [d:\Tencent\qq\BQQApplication.dll]  <N/A><N/A>
    [d:\Tencent\qq\CommercesMng.dll]  <><1, 0, 0, 1>
    [d:\Tencent\qq\PersonalDesktop.dll]  <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 2>
    [d:\Tencent\qq\QQUdpGetFileLib.dll]  <tencent><0, 2, 2, 3>
    [d:\Tencent\qq\QQAddr.dll]  <深圳市腾讯计算机系统有限公司><5, 0, 101, 200>
    [d:\Tencent\qq\QQMagicFace.dll]  <><1, 0, 0, 1>
    [d:\Tencent\qq\QQPhoneHelper.dll]  <腾讯科技（深圳）有限公司><2, 0, 6, 60>
    [d:\Tencent\qq\QQFileTransfer.dll]  <Tencent><5, 0, 202, 180>
    [d:\Tencent\qq\GroupConnection.dll]  <Tencent><5, 0, 202, 170>
[PID: 2688][D:\Tencent\QQ\TIMPlatform.exe]  <tencent><0, 3, 1, 8>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 9>
    [C:\WINDOWS\downlo~1\Orea.dll]  <Tencent><4, 2, 5, 51>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <Yahoo! China><3, 0, 2, 1020>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  <Yahoo! China><3, 0, 9, 1015>
    [C:\kav2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
    [d:\Tencent\qq\TIMProxy.dll]  <tencent><0, 3, 2, 4>
[PID: 1444][D:\Tencent\TT\TTraveler.exe]  <腾讯公司><3.1.0.259>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 9>
    [C:\WINDOWS\downlo~1\Orea.dll]  <Tencent><4, 2, 5, 51>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <Yahoo! China><3, 0, 2, 1020>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  <Yahoo! China><3, 0, 9, 1015>
    [C:\kav2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\yalive.dll]  <yahoo! china><3, 2, 5, 1075>
    [D:\Tencent\TT\Plugins\QQFloatBar\QQFloatBar4TT2.dll]  <腾讯公司><1, 1, 0, 5>
    [D:\Tencent\TT\Plugins\TWeather\TWeather.dll]  <><1, 0, 0, 3>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yalliveex.dll]  <Yahoo! China><3, 0, 1, 1010>
    [D:\Tencent\TT\PersonalDesktop.dll]  <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 4>
    [C:\WINDOWS\HKNTDLL.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx]  <Adobe Systems, Inc.><9,0,16,0>
[PID: 2648][C:\Program Files\Thunder Network\Thunder\Program\Thunder5.exe]  <Thunder Networking Technologies,LTD><5.3.0.220>
    [C:\Program Files\Thunder Network\Thunder\Program\UpdateDownload.dll]  <Thunder Networking Technologies,LTD><1, 0, 1, 8>
    [C:\Program Files\Thunder Network\Thunder\Program\download_interface.dll]  <Thunder Networking Technologies,LTD><1, 0, 4, 71>
    [C:\Program Files\Thunder Network\Thunder\Program\log4cplus.dll]  <><1, 0, 2, 1>
    [C:\Program Files\Thunder Network\Thunder\Program\stlport_vc646.dll]  <STLport Consulting, Inc.><4.6.2003.1031>
    [C:\Program Files\Thunder Network\Thunder\Program\asyn_dns.dll]  <N/A><N/A>
    [C:\Program Files\Thunder Network\Thunder\Program\msgmanage.dll]  <Thunder Networking Technologies,LTD><1, 0, 0, 15>
    [C:\Program Files\Thunder Network\Thunder\Program\historyinfo_manage.dll]  <Thunder Networking Technologies,LTD><5, 2, 0, 148>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 9>
    [C:\WINDOWS\downlo~1\Orea.dll]  <Tencent><4, 2, 5, 51>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <Yahoo! China><3, 0, 2, 1020>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  <Yahoo! China><3, 0, 9, 1015>
    [C:\kav2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
    [C:\Program Files\Thunder Network\Thunder\Program\RegisterDll.dll]  <Thunder Networking Technologies,LTD><2, 1, 0, 18>
    [C:\Program Files\Thunder Network\Thunder\Program\FloatBar.dll]  <Thunder Networking Technologies,LTD><1, 0, 0, 2>
    [C:\Program Files\Thunder Network\Thunder\Plugins\TingTing\TingTing.dll]  <Thunder Networking Technologies,LTD><1, 1, 1, 9>
    [C:\Program Files\Thunder Network\Thunder\Components\InMedia\iEmbedShell.dll]  <　><1, 0, 0, 11>
    [C:\Program Files\Thunder Network\Thunder\Components\InMedia\iEmbed04.dll]  <　><2, 3, 0, 37>
    [C:\Program Files\Thunder Network\Thunder\Components\P4PClient\P4PClient.dll]  <Thunder Networking Technologies,LTD><1, 0, 3, 8>
    [C:\Program Files\Thunder Network\Thunder\Program\iTargetAd.dll]  <Thunder Networking Technologies,LTD><1, 0, 1, 55>
    [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx]  <Adobe Systems, Inc.><9,0,16,0>
    [C:\WINDOWS\HKNTDLL.dll]  <N/A><N/A>
[PID: 2364][F:\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 9>
    [C:\WINDOWS\downlo~1\Orea.dll]  <Tencent><4, 2, 5, 51>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <Yahoo! China><3, 0, 2, 1020>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  <Yahoo! China><3, 0, 9, 1015>
    [C:\kav2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>

文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

你给的东西好深奥啊。我都看不懂，看来我家的电脑是没救了，次次都要受折磨。看来我是疯定了啊~

哈哈，正好用上，谢谢啦。！！！学习ING~~~

【回复“小凯色色”的帖子】
注意，自己立个帖子，把你修复后的日志粘到你的帖子上来，再给我回个悄悄话。

下载超级兔子。
http://www.pctutu.com/srmsdown.asp
安装好后，打开“超级兔子优化王”“专业卸载,卸载所有提示的垃圾软件，卸载是不要打开任何浏览窗口。卸载不了可以重启后再去卸载。
卸载完后

打开System Repair Engineer（也就是你的扫描日志软件SREng.exe），点“启动项目，服务，点“Win32服务应用程序”勾选“隐藏微软服务”选中病毒服务Windows Rwxf,NetWork Download ,system30,UpdateService，选择“删除服务”点“设置”选择“否”最后重启。（每一个逗号隔开的就是一个病毒的服务，请逐一删除）

关闭所有浏览窗口以及一些不必要的程序
打开System Repair Engineer（也就是你的扫描日志软件SREng.exe），使用“系统修复，浏览器加载项”来删除以下选项。
C:\WINDOWS\system32\IESeven.dll
C:\WINDOWS\system32\cytdcli.dll

请到www.27814939.ys168.com,点“我的软件”下载KillBox.exe
重新启动电脑, 开机检测完后, 按[F8]键(可以一直按到启动菜单出来为止), 选择安全模式进入Windows
双击打开KillBox.exe，分别删除
C:\WINDOWS\system32\tapidef.dll
C:\WINDOWS\system32\SYSPOL~1.DLL
C:\WINDOWS\system32\lasss.exe
C:\WINDOWS\system32\WinMgmt.exe
C:\WINDOWS\system30.exe
C:\WINDOWS\system32\UpdateService.exe
C:\WINDOWS\system32\IESeven.dll
C:\WINDOWS\system32\cytdcli.dll
C:\WINDOWS\system32\UpdateModule.dll
（删除时勾选“删除前先结束Explorer.EXE进程”不行再试着勾选"删除DLL文件前反注册此文件"
给菜鸟的东东—KillBox的使用技巧
http://forum.ikaka.com/topic.asp?board=28&artid=8160799

打开System Repair Engineer（也就是你的扫描日志软件SREng.exe），使用“启动项目，注册表”来删除以下选项。
C:\WINDOWS\system32\tapidef.dll
C:\WINDOWS\system32\SYSPOL~1.DLL
完后重启，再扫个日志粘上来。

本人扫描结果

Logfile of Kaka v2. 0. 0. 9 Scan Module v2. 0. 0. 1
Scan saved at 20:34:41, on 2006-10-09
Platform: Microsoft Windows XP Professional Service Pack 2 (Build 2600)
MSIE: Internet Explorer v6.00 SP2; (6.00.2900.2180 (xpsp_sp2_rtm.040803-2158))


Running processes:
[SMSS.EXE]
CommandLine =

[CSRSS.EXE]
CommandLine = C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16

[WINLOGON.EXE]
CommandLine = winlogon.exe

[SERVICES.EXE]
CommandLine = C:\WINDOWS\system32\services.exe

[LSASS.EXE]
CommandLine = C:\WINDOWS\system32\lsass.exe

[SVCHOST.EXE]
CommandLine = C:\WINDOWS\system32\svchost -k DcomLaunch

[SVCHOST.EXE]
CommandLine = C:\WINDOWS\system32\svchost -k rpcss

[CCenter.exe]
CommandLine = "E:\Program Files\Rising\Rav\CCenter.exe"

[SVCHOST.EXE]
CommandLine = C:\WINDOWS\System32\svchost.exe -k netsvcs

[SVCHOST.EXE]
CommandLine = C:\WINDOWS\system32\svchost.exe -k NetworkService

[SVCHOST.EXE]
CommandLine = C:\WINDOWS\system32\svchost.exe -k LocalService

[RavMonD.exe]
CommandLine = "E:\Program Files\Rising\Rav\Ravmond.exe"

[EXPLORER.EXE]
CommandLine = C:\WINDOWS\Explorer.EXE

[SPOOLSV.EXE]
CommandLine = C:\WINDOWS\system32\spoolsv.exe

[RavStub.exe]
CommandLine = "E:\Program Files\Rising\Rav\RavStub.exe" /RAVMOND

[NETDDE.EXE]
CommandLine = C:\WINDOWS\system32\netdde.exe

[daemon.exe]
CommandLine = "G:\Program Files\D-Tools\daemon.exe" -lang 2052

[CLIPSRV.EXE]
CommandLine = C:\WINDOWS\system32\clipsrv.exe

[CTFMON.EXE]
CommandLine = "C:\WINDOWS\system32\ctfmon.exe"

[ALG.EXE]
CommandLine = C:\WINDOWS\System32\alg.exe

[Rav.exe]
CommandLine = "E:\Program Files\Rising\Rav\Rav.exe"

[YLIVE.EXE]
CommandLine = "C:\PROGRA~1\Yahoo!\ASSIST~1\ylive.exe"

[Thunder5.exe]
CommandLine = "e:\Program Files\Thunder Network\Thunder\Program\Thunder5.exe" /192.168.1.8zz-85ad8613114f7E9

[KkScan.exe]
CommandLine = "G:\Program Files\Rising\KakaToolBar\KkScan.exe"

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page=http://www.yahoo.com.cn
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page=http://www.yahoo.com.cn
R3 - URLSearchHook: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar0.dll
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 59.34.148.98 www.hao123.com
O1 - Hosts: 59.34.148.98 www.4199.com
O1 - Hosts: 59.34.148.98 www.9505.com
O1 - Hosts: 59.34.148.98 www.7322.com
O1 - Hosts: 218.5.76.175 www.huoche.com.cn
O2 - BHO: (file missing)
O2 - BHO: (file missing)
O2 - BHO: (file missing)
O2 - BHO: (file missing)
O2 - BHO: 卡卡上网安全助手 - {AFF6E516-CBE5-4F8A-9C2F-38A68013E766} - C:\WINDOWS\system32\kakatool.dll
O2 - BHO: conimehlp Class - {B10343BD-1DC6-442F-9BA2-D44C708CEE83} - C:\WINDOWS\system32\mskey32.dll
O2 - BHO: (file missing)
O2 - BHO: (file missing)
O2 - BHO: (file missing)
O3 - Toolbar: (file missing)
O3 - Toolbar: (file missing)
O3 - Toolbar: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\system32\kakatool.dll
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKLM\..\Run: [DAEMON Tools-2052] "G:\Program Files\D-Tools\daemon.exe" -lang 2052
O4 - Startup: desktop.ini =
O4 - Startup: 腾讯QQ.lnk = E:\QQ\QQ.exe
O4 - Global Startup: desktop.ini =
O4 - Global Startup: Microsoft Office.lnk = E:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &使用迅雷下载 - e:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm
O9 - Extra Button: Yahoo 3.5G电邮 - {507F9113-CD77-4866-BA92-0E86DA3D0B97}? - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail (file missing)
O9 - Extra Button: 名品折扣 - {59BC54A2-56B3-44a0-93E5-432D58746E26}? - http://adtaobao.allyes.com/main/adfclick?db=adtaobao&bid=138,140,18&cid=816,8,1&sid=5042&show=ignore&url=http://www.taobao.com/vertical/mall/pro.php?allyesPara=816 (file missing)
O9 - Extra Button: 雅虎助手 - {5D73EE86-05F1-49ed-B850-E423120EC338}? - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yassist (file missing)
O9 - Extra Button: 雅虎WIDGET - {6354ABE6-05F1-49ed-B850-E423120EC338}? - http://cn.widget.yahoo.com/index.htm?source=Cns (file missing)
O9 - Extra Button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b}? - E:\QQ\QQ.EXE
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b}? - E:\QQ\QQ.EXE
O9 - Extra Button: 情景聊天 - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96}? - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomsg (file missing)
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra Button: 访问瑞星网站 - {FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E444} - http://www.rising.com.cn/?u=RSTB (file missing)
O9 - Extra Button: 访问卡卡社区 - {FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E445} - http://www.ikaka.com/?u=RSTB (file missing)
O14 - IERESET.INF: START_PAGE_URL=http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
O15 - Trusted Zone: http://localhost
O16 - DPF: {0CA54D3F-CEAE-48AF-9A2B-31909CB9515D} (Edit Class) - https://www.sz1.cmbchina.com/download/CMBEdit.cab
O16 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (Rising Web Scan Object) - http://download.rising.com.cn/register/pcver/autoupgradepad/pcver2006new/OL2006.cab
O16 - DPF: {FEE1002D-90A5-4A5D-AABE-01803FFBCF7A} (pCastPanel Class) - http://ps.itv.mop.com/dn/files/pCastCtl-1.0.0.90-signed.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{DE80B122-4063-4EFC-9489-1378C4562A6B}: NameServer = 202.103.96.112
O18 - Protocol: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll
O18 - Protocol: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL
O18 - Protocol: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll
O18 - Protocol: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: ic32pp - {BBCA9F81-8F4F-11D2-90FF-0080C83D3571} - C:\WINDOWS\wc98pp.dll
O18 - Protocol: ipp - (no CLSID) - (no file)
O18 - Protocol: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll
O18 - Protocol: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll
O18 - Protocol: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll
O18 - Protocol: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINDOWS\system32\inetcomm.dll
O18 - Protocol: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll
O18 - Protocol: msdaipp - (no CLSID) - (no file)
O18 - Protocol: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL
O18 - Protocol: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll
O18 - Protocol: sysimage - {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\system32\mshtml.dll
O18 - Protocol: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll
O18 - Protocol: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll
O18 - Protocol: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\system32\wiascr.dll
O23 - Service: Human Interface Device Access (HidServ) - - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - "E:\Program Files\Rising\Rav\CCenter.exe"
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - "E:\Program Files\Rising\Rav\Ravmond.exe

本人用橙色八月专杀发现可疑病毒，，但在安全模式下也无法删除，文件名为２ＣＥ４ＦＢ７Ｆ．ＤＬＬ，在Ｃ盘

这个软件那里有下载

【回复“足球爱好者之一”的帖子】
KillBox不是万能的，你的解决方法不到点上
自己立个帖子，扫个日志，把帖子的链接通过悄悄话发给我。

谢谢，别人帮我做好了，