[PID: 9816][F:\RealPlayer10\realplay.exe] [RealNetworks, Inc., 6.0.11.872]
[C:\WINDOWS\system32\PNCRT.dll] [Real Networks, Inc, 6.0.0.0]
[C:\Program Files\Common Files\Real\Common\objb3201.dll] [RealNetworks, Inc., 0.1.0.3389]
[F:\RealPlayer10\rpplugins\rpap3260.dll] [RealNetworks, Inc., 6.0.9.1501]
[C:\Program Files\Common Files\Real\Common\pngu3267.dll] [RealNetworks, Inc., 6.7.0.900]
[C:\Program Files\Common Files\Real\Common\pnrs3260.dll] [RealNetworks, Inc., 6.0.9.2068]
[F:\RealPlayer10\lang\cdplay_cn.dll] [RealNetworks, Inc., 6.0.4.382]
[F:\RealPlayer10\lang\dbcomp_cn.dll] [RealNetworks, Inc., 6.0.4.382]
[F:\RealPlayer10\lang\embed_cn.dll] [RealNetworks, Inc., 6.0.4.382]
[F:\RealPlayer10\lang\gemctl_cn.dll] [RealNetworks, Inc., 6.0.4.382]
[F:\RealPlayer10\lang\pngui_cn.dll] [RealNetworks, Inc., 6.0.4.382]
[F:\RealPlayer10\lang\rjctl_cn.dll] [RealNetworks, Inc., 6.0.4.382]
[F:\RealPlayer10\lang\rjeq_cn.dll] [RealNetworks, Inc., 6.0.4.382]
[F:\RealPlayer10\lang\rjres_cn.dll] [RealNetworks, Inc., 6.0.4.382]
[F:\RealPlayer10\lang\rjskin_cn.dll] [RealNetworks, Inc., 6.0.4.382]
[F:\RealPlayer10\lang\rjviz_cn.dll] [RealNetworks, Inc., 6.0.4.382]
[F:\RealPlayer10\lang\rjfade_cn.dll] [RealNetworks, Inc., 6.0.4.382]
[F:\RealPlayer10\lang\rjdlg_cn.dll] [RealNetworks, Inc., 6.0.4.382]
[F:\RealPlayer10\lang\rjmisc_cn.dll] [RealNetworks, Inc., 6.0.4.382]
[F:\RealPlayer10\lang\rjprog_cn.dll] [RealNetworks, Inc., 6.0.4.382]
[F:\RealPlayer10\lang\rpapp_cn.dll] [RealNetworks, Inc., 6.0.4.382]
[F:\RealPlayer10\lang\rpclsvc_cn.dll] [RealNetworks, Inc., 6.0.4.382]
[F:\RealPlayer10\lang\rpclutil_cn.dll] [RealNetworks, Inc., 6.0.4.382]
[F:\RealPlayer10\lang\rpdemand_cn.dll] [RealNetworks, Inc., 6.0.4.382]
[F:\RealPlayer10\lang\rpdsplyr_cn.dll] [RealNetworks, Inc., 6.0.4.382]
[F:\RealPlayer10\lang\rpgutil_cn.dll] [RealNetworks, Inc., 6.0.4.382]
[F:\RealPlayer10\lang\rpmnpane_cn.dll] [RealNetworks, Inc., 6.0.4.382]
[F:\RealPlayer10\lang\rpplylst_cn.dll] [RealNetworks, Inc., 6.0.4.382]
[F:\RealPlayer10\lang\rptrkedt_cn.dll] [RealNetworks, Inc., 6.0.4.382]
[F:\RealPlayer10\lang\rpwebctl_cn.dll] [RealNetworks, Inc., 6.0.4.382]
[F:\RealPlayer10\lang\tcdinfo_cn.dll] [RealNetworks, Inc., 6.0.4.382]
[F:\RealPlayer10\lang\tclsvc_cn.dll] [RealNetworks, Inc., 6.0.4.382]
[F:\RealPlayer10\lang\tdwnmgr_cn.dll] [RealNetworks, Inc., 6.0.4.382]
[F:\RealPlayer10\lang\tmp3_cn.dll] [RealNetworks, Inc., 6.0.4.382]
[F:\RealPlayer10\lang\twave_cn.dll] [RealNetworks, Inc., 6.0.4.382]
[F:\RealPlayer10\lang\tmdedit_cn.dll] [RealNetworks, Inc., 6.0.4.382]
[F:\RealPlayer10\lang\mydevices_cn.dll] [RealNetworks, Inc., 6.0.4.382]
[F:\RealPlayer10\rpplugins\rpcl3260.dll] [RealNetworks, Inc., 6.0.9.1576]
[C:\Program Files\Common Files\Real\RCAPlugins\uisy3201.dll] [RealNetworks, Inc., 0.1.0.1760]
[C:\Program Files\Common Files\Real\Plugins\zipf3260.dll] [RealNetworks, 6.0.7.2536]
[F:\RealPlayer10\rpplugins\rpct3260.dll] [RealNetworks, 6.0.0.547]
[C:\Program Files\Common Files\Real\RCAPlugins\gemc3201.dll] [RealNetworks, Inc., 0.1.0.3395]
[C:\Program Files\Common Files\Real\Plugins\imgr3260.dll] [RealNetworks, Inc., 6.0.7.3916]
[C:\Program Files\Common Files\Real\Plugins\pxcb3210.dll] [RealNetworks, Inc., 1.0.0.2128]
[F:\RealPlayer10\rpplugins\rpmn3260.dll] [RealNetworks, Inc., 6.0.9.1419]
[F:\RealPlayer10\rpplugins\rpms3260.dll] [RealNetworks, Inc., 6.0.0.338]
[F:\RealPlayer10\rpplugins\rjbe3260.dll] [RealNetworks, Inc., 6.0.3.836]
[F:\RealPlayer10\rpplugins\MPACore.dll] [RealNetworks, Inc., 1.0.2.1139]
[F:\RealPlayer10\rpplugins\rpwe3260.dll] [RealNetworks, 6.0.0.546]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16414 (vista_gdr.070108-1520)]
[F:\RealPlayer10\twebbrowse.dll] [RealNetworks, Inc., 1.0.2.311]
[C:\WINDOWS\system32\ieframe.dll] [Microsoft Corporation, 7.00.6000.16414 (vista_gdr.070108-1520)]
[F:\RealPlayer10\tnetdtct.dll] [RealNetworks, Inc., 1.0.2.1236]
[F:\RealPlayer10\rpplugins\ierpplug.dll] [RealNetworks, 1.0.0.635]
[C:\Program Files\Common Files\Real\Common\pnen3260.dll] [RealNetworks, Inc., 6.0.9.2006]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\Program Files\Common Files\Real\Plugins\vsrl3260.dll] [RealNetworks, Inc., 6.0.7.3265]
[C:\Program Files\Common Files\Real\Plugins\pnxr3260.dll] [RealNetworks, Inc., 6.0.7.4552]
[C:\Program Files\Common Files\Real\Plugins\sdpp3260.dll] [RealNetworks, Inc., 6.0.7.4363]
[C:\Program Files\Common Files\Real\Plugins\smlr3260.dll] [RealNetworks, Inc., 6.0.7.3454]
[C:\Program Files\Common Files\Real\Plugins\auth3260.dll] [RealNetworks, Inc., 6.0.7.4031]
[C:\Program Files\Common Files\Real\Plugins\pnvi3260.dll] [RealNetworks, Inc., 6.0.3.1265]
[C:\Program Files\Common Files\Real\Plugins\xmlp3261.dll] [RealNetworks, Inc., 6.1.0.1637]
[C:\Program Files\Common Files\Real\Common\rjbviz.dll] [RealNetworks, Inc., 1.0.2.2362]
[C:\Program Files\Common Files\Real\Codecs\rnlt3260.dll] [RealNetworks, Inc., 6.0.7.4829]
[C:\Program Files\Common Files\Real\Plugins\http3260.dll] [RealNetworks, Inc., 6.0.7.4278]
[C:\Program Files\Common Files\Real\Plugins\ramf3260.dll] [RealNetworks, Inc., 6.0.7.3451]
[F:\RealPlayer10\rpplugins\rpgu3260.dll] [RealNetworks, Inc., 6.0.9.1379]
[C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0]
[C:\Program Files\Common Files\Real\Update_OB\rnad3201.dll] [RealNetworks, Inc., 0.1.0.1622]
[C:\Program Files\Common Files\Real\RCAPlugins\gema3201.dll] [RealNetworks, Inc., 0.1.0.1752]
[C:\Program Files\Internet Explorer\ieproxy.dll] [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
[C:\Program Files\Common Files\Real\Plugins\memf3260.dll] [RealNetworks, Inc., 6.0.7.3886]
[C:\Program Files\Common Files\Real\Plugins\ramr3260.dll] [RealNetworks, Inc., 6.0.7.3437]
[C:\Program Files\Common Files\Real\Plugins\smlf3260.dll] [RealNetworks, Inc., 6.0.7.3482]
[C:\Program Files\Common Files\Real\Plugins\rmff3260.dll] [RealNetworks, Inc., 6.0.9.1746]
[C:\Program Files\Common Files\Real\Plugins\rare3260.dll] [RealNetworks, Inc., 6.0.9.1570]
[C:\Program Files\Common Files\Real\Plugins\rvre3260.dll] [RealNetworks, Inc., 6.0.9.1648]
[C:\WINDOWS\system32\rmoc3260.dll] [RealNetworks, 6.0.8.1839]
[F:\RealPlayer10\rpplugins\embd3260.dll] [RealNetworks, Inc., 6.0.11.847]
[F:\RealPlayer10\rpplugins\rput3260.dll] [RealNetworks, Inc., 6.0.9.1544]
[C:\Program Files\Common Files\Real\Codecs\cook3260.dll] [RealNetworks, Inc., 6.0.8.2523]
[C:\Program Files\Common Files\Real\Codecs\RV403260.DLL] [RealNetworks, Inc., 6.0.7.2389]
[C:\Program Files\Common Files\Real\Codecs\drv43260.dll] [RealNetworks, Inc., 6.0.7.2389]
[F:\360\360safe\safemon\safemon.dll] [, 3, 2, 0, 1001]
[PID: 9876][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] [RealNetworks, Inc., 0.1.0.1622]
[F:\RealPlayer10\rpplugins\rpms3260.dll] [RealNetworks, Inc., 6.0.0.338]
[C:\WINDOWS\system32\PNCRT.dll] [Real Networks, Inc, 6.0.0.0]
[PID: 8572][C:\Program Files\Common Files\Real\Update_OB\rnathchk.exe] [RealNetworks, Inc., 7.0.0.1176]
[C:\WINDOWS\system32\PNCRT.dll] [Real Networks, Inc, 6.0.0.0]
[C:\Program Files\Common Files\Real\Update_OB\athn3270.dll] [RealNetworks, Inc., 7.0.0.1187]
[C:\Program Files\Common Files\Real\Common\pnrs3260.dll] [RealNetworks, Inc., 6.0.9.2068]
[F:\RealPlayer10\rpplugins\rpms3260.dll] [RealNetworks, Inc., 6.0.0.338]
[PID: 9084][F:\360\360safe\safemon\360Tray.exe] [奇虎网, 3, 2, 1, 1001]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16414 (vista_gdr.070108-1520)]
[F:\RealPlayer10\rpplugins\rpms3260.dll] [RealNetworks, Inc., 6.0.0.338]
[C:\WINDOWS\system32\PNCRT.dll] [Real Networks, Inc, 6.0.0.0]
[F:\360\360safe\safemon\safemon.dll] [, 3, 2, 0, 1001]
[F:\360\360safe\safemon\SafeKrnl.dll] [奇虎网, 3, 2, 0, 1001]
[F:\360\360safe\AntiAdwa.dll] [360Safe.com, 3, 2, 0, 1001]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[F:\360\360safe\live.dll] [360safe.COM, 1, 0, 0, 1011]
[PID: 6540][F:\智能扫描\SRENG2\SREng.EXE] [Smallfrogs Studio, 2.4.12.806]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16414 (vista_gdr.070108-1520)]
[F:\360\360safe\safemon\safemon.dll] [, 3, 2, 0, 1001]
[F:\RealPlayer10\rpplugins\rpms3260.dll] [RealNetworks, Inc., 6.0.0.338]
[C:\WINDOWS\system32\PNCRT.dll] [Real Networks, Inc, 6.0.0.0]
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1 localhost
==================================
API HOOK
入口点错误:FreeLibrary (危险等级: 高, 被下面模块所HOOK: Dest Addr: 0x5F00002D)
==================================
隐藏进程
[1416] C:\WINDOWS\system32\sysos.exe