[C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9]
[D:\工作软件\unlocker\UnlockerCOM.dll] [N/A, ]
[C:\Program Files\WinRAR\rarext.dll] [N/A, ]
[C:\Program Files\Corel\shared\Versions\CVersion.dll] [Corel Corporation Limited, 9.0.0.528]
[C:\Program Files\Corel\shared\Versions\VERS232.dll] [N/A, ]
[C:\Program Files\Corel\shared\Versions\IMPLODE.DLL] [N/A, ]
[D:\工作软件\XMAO\ShellTit.DLL] [Panda Software International, 6.1.02]
[D:\工作软件\XMAO\PSWLabel.dll] [Panda Software S.L., 5.12.01.00]
[D:\工作软件\XMAO\PSWLRes.dll] [Panda Software S.L., 7.07.06.03]
[D:\工作软件\XMAO\TitCfg.dll] [Panda Software International, 7.00.00]
[C:\WINDOWS\system32\wpdshext.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)]
[C:\WINDOWS\system32\PortableDeviceApi.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)]
[C:\WINDOWS\system32\Audiodev.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)]
[C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 7.0.7.2006011200]
[C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\Program Files\Microsoft Office\OFFICE11\msohev.dll] [Microsoft Corporation, 11.0.5510]
[PID: 1196][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\WINABC.IME] [PKUETI, 5.22.216]
[PID: 2892][C:\WINDOWS\system32\conime.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\WINABC.IME] [PKUETI, 5.22.216]
[PID: 3164][C:\Program Files\StormII\Storm.exe] [北京暴风网际科技有限公司, 2, 7, 4, 19]
[C:\Program Files\StormII\supdate.dll] [Biejing Baofeng Inc., 2, 7, 4, 19]
[C:\WINDOWS\system32\WINABC.IME] [PKUETI, 5.22.216]
[C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[C:\Program Files\StormII\admedia.dll] [home, 1, 7, 4, 19]
[C:\PROGRA~1\StormII\mps.dll] [Biejing Baofeng Inc., 2, 7, 4, 16]
[C:\PROGRA~1\StormII\score.dll] [Biejing Baofeng Inc., 2, 7, 3, 23]
[C:\PROGRA~1\StormII\sexpert.dll] [Biejing Baofeng Inc., 2, 7, 3, 23]
[C:\PROGRA~1\StormII\sparser.dll] [Biejing Baofeng Inc., 2, 7, 3, 23]
[C:\PROGRA~1\StormII\sprobe.dll] [Biejing Baofeng Inc., 2, 7, 4, 16]
[C:\PROGRA~1\StormII\splayers.dll] [Biejing Baofeng Inc., 2, 7, 4, 16]
[C:\Program Files\StormII\Codec\RMSplt.ax] [Gabest, 1, 0, 1, 1]
[C:\Program Files\StormII\Codec\VSFilter.dll] [Gabest, 1, 0, 1, 3]
[C:\Program Files\Common Files\Real\Codecs\COOK.dll] [RealNetworks, Inc., 10.0.0.2389]
[C:\WINDOWS\system32\PNCRT.dll] [Real Networks, Inc, 6.0.0.0]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[D:\工作软件\XMAO\pavlsp.dll] [Panda Software International, 6, 6, 17, 54]
[C:\Program Files\Common Files\Real\Codecs\drvc.dll] [RealNetworks, Inc., 10.0.0.1740]
[D:\工作软件\XMAO\PavTrc.dll] [Panda Software International, 5, 12, 17, 520]
[PID: 2604][C:\Program Files\ChinaNet\VnetBrowser\IG.exe] [, 1, 0, 0, 1]
[C:\Program Files\ChinaNet\VnetBrowser\IM.dll] [, 1, 0, 0, 1]
[C:\Program Files\ChinaNet\VnetBrowser\utility.dll] [, 1, 0, 0, 1]
[C:\Program Files\ChinaNet\VnetBrowser\downwebdll.dll] [, 1, 0, 0, 1]
[C:\Program Files\ChinaNet\VnetBrowser\Skin.dll] [, 1, 0, 0, 1]
[C:\Program Files\ChinaNet\VnetBrowser\CIGBaseDll.dll] [, 1, 0, 0, 1]
[C:\Program Files\ChinaNet\VnetBrowser\CoolSkin.dll] [, 1, 0, 0, 1]
[C:\Program Files\ChinaNet\VnetBrowser\PluginLib.dll] [, 1, 0, 0, 1]
[C:\Program Files\ChinaNet\VnetBrowser\CopemateInfo.dll] [, 1, 0, 0, 1]
[C:\Program Files\ChinaNet\VnetBrowser\MarkShell.dll] [, 1, 0, 0, 1]
[C:\WINDOWS\system32\WINABC.IME] [PKUETI, 5.22.216]
[C:\Program Files\ChinaNet\VnetBrowser\IG_Plugin\subjects.dll] [, 1, 0, 0, 1]
[C:\Program Files\ChinaNet\VnetBrowser\IGPopUp.dll] [, 1, 0, 0, 1]
[C:\Program Files\ChinaNet\VnetBrowser\Sqlite.dll] [N/A, ]
[C:\Program Files\ChinaNet\VnetBrowser\IGWB.dll] [Zhongsou, 1, 0, 0, 1]
[D:\工作软件\XMAO\pavlsp.dll] [Panda Software International, 6, 6, 17, 54]
[D:\工作软件\XMAO\PavTrc.dll] [Panda Software International, 5, 12, 17, 520]
[C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\system32\WINZHE.IME] [苏州大学纵横汉字信息技术研究所, 2002,2001,11,20]
[C:\WINDOWS\system32\NQWBX.IME] [念青：http://nq.yeah.net, 2.03.05.08]
[PID: 2216][D:\工作软件\P2PTVRecorder\P2PTVRecorder.exe] [N/A, ]
[C:\WINDOWS\system32\WINABC.IME] [PKUETI, 5.22.216]
[D:\工作软件\XMAO\pavlsp.dll] [Panda Software International, 6, 6, 17, 54]
[D:\工作软件\XMAO\PavTrc.dll] [Panda Software International, 5, 12, 17, 520]
[PID: 1868][D:\工作软件\网络电视\PPStream\PPStream.exe] [PPStream.com, 1, 0, 4, 725]
[C:\WINDOWS\system32\WINABC.IME] [PKUETI, 5.22.216]
[D:\工作软件\网络电视\PPStream\POWERP~1.DLL] [PPStream Inc., 1,0,0,3302]
[D:\工作软件\网络电视\PPStream\PSNetwork.dll] [PPStream, inc., 1, 0, 0, 2468]
[D:\工作软件\XMAO\pavlsp.dll] [Panda Software International, 6, 6, 17, 54]
[D:\工作软件\XMAO\PavTrc.dll] [Panda Software International, 5, 12, 17, 520]
[D:\工作软件\网络电视\PPStream\POWERL~1.OCX] [PPStream.com, 1, 0, 0, 2003]
[C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\system32\MFPlat.DLL] [Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006)]
[C:\WINDOWS\system32\msdmo.dll] [, ]
[C:\WINDOWS\system32\WMVDECOD.dll] [Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006)]
[C:\WINDOWS\system32\ffdshow.ax] [, 1.0.2.2028]
[C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\Program Files\StormII\Codec\VSFilter.dll] [Gabest, 1, 0, 1, 3]
[C:\WINDOWS\system32\wmpeffects.dll] [Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006)]
[PID: 1568][E:\新建文件夹 (6)\TT.EXE] [Smallfrogs Studio, 2.4.12.806]
[C:\WINDOWS\system32\WINABC.IME] [PKUETI, 5.22.216]
[D:\工作软件\XMAO\pavlsp.dll] [Panda Software International, 6, 6, 17, 54]
[D:\工作软件\XMAO\PavTrc.dll] [Panda Software International, 5, 12, 17, 520]
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
PAV_LAYERED over [MSAFD Tcpip [TCP/IP]]
D:\工作软件\XMAO\pavlsp.dll(Panda Software International, Internet Resident Layered Service Provider)
PAV_LAYERED over [MSAFD Tcpip [UDP/IP]]
D:\工作软件\XMAO\pavlsp.dll(Panda Software International, Internet Resident Layered Service Provider)
PAV_LAYERED over [MSAFD Tcpip [RAW/IP]]
D:\工作软件\XMAO\pavlsp.dll(Panda Software International, Internet Resident Layered Service Provider)
PAV_LAYERED
D:\工作软件\XMAO\pavlsp.dll(Panda Software International, Internet Resident Layered Service Provider)
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1 localhost
==================================
API HOOK
N/A
==================================
隐藏进程
[193] C:\Program Files\Terminator\SecMain.exe
[3737] C:\Program Files\Terminator\SecBkSrv.exe
==================================
[/CODE]
