O16 - 安全 - DPF: 无效的CLSID：_{5DD731E6-D4F0-11D3-BE3F-00105A6FDA50} (安博士在线杀毒) - http://origin-www.ahn.com.cn/aspservice/plugin/myv3.cab
O16 - 安全 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MSN Messenger Setup Downloader) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - 安全 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Flash播放器) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - 安全 - DPF: {DA984A6D-508E-11D6-AA49-0050FF3C628D} (瑞星在线查毒) - http://download.rising.com.cn/ravkill/rsonline.cab
O16 - 安全 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (瑞星免费在线查毒插件) - http://download.rising.com.cn/register/pcver/autoupgradepad/pcver2006new/OL2006.cab
O23 - 安全 - Service: Ati HotKey Poller [ati显卡相关后台程序。] - C:\WINDOWS\System32\Ati2evxx.exe - (running)
O23 - 安全 - Service: RsCCenter [是瑞星杀毒软件控制台相关程序。] - "C:\Program Files\Rising\Rav\CCenter.exe" - (running)
O23 - 安全 - Service: RsRavMon [是瑞星杀毒软件相关监控程序。] - "C:\Program Files\Rising\Rav\Ravmond.exe" - (running)

=======================================

O40 - explorer.exe - Adobe Systems, Inc. - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll - PDF Shell Extension - 4b0991cd076b617a2231b19a6663c1c9
O40 - explorer.exe - WinZip Computing, Inc. - C:\PROGRA~1\WINZIP\WZSHLSTB.DLL - WinZip Shell Extension DLL - badd66f7d8ea1c181398cb868cf1ff83
O40 - explorer.exe - herosoft - C:\Herosoft\HeroV8\VCvtShell.dll - VCvtShell - 0303f471b69eb38bf96a902bad93780f
O40 - explorer.exe -  - D:\Program Files\MP3 Player Utilities 3.74\AMVConverter\AmvTransform.dll - AmvTransform Module - 0bba49f0b0f3f646d9128b963d6bb777
O40 - explorer.exe -  - C:\Documents and Settings\xxg\Herosoft\Hero Video Convert\VCvtShell.dll -  - 41bb1f87a1e487d8bfdf83a27c22283f
O40 - explorer.exe -  - C:\Documents and Settings\xxg\Herosoft\Hero Video Convert\VCvtS936.dll -  - 91cc6439c99875bc2893af7757bf4f6a
O40 - explorer.exe -  - d:\PROGRA~1\3721\ske\contmenu.dll -  - 5f635161a9494952faf6b64f91a60fd5
O40 - explorer.exe - Beijing Rising Technology Co., Ltd. - C:\WINDOWS\system32\RavExt.dll - Rising Shell Ext Module - fa20734a7acabcfe9d727fb343da4e8a
O40 - explorer.exe - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\RSCOMMON.DLL - Rising Common Function Dynamic Link Library - 58432e6c58f1b4c339adc1a79bf864b6
O40 - explorer.exe - Thunder Networking Technologies,LTD - D:\Program Files\Thunder Network\Thunder\Components\ResWorker\DataProcessor.dll - DataProcessor - acaefd2351d996bd17a3abd0aacae40d

=======================================

O41 - BaseTDI - basetdi - C:\WINDOWS\system32\drivers\basetdi.sys - (running) - basetdi - Beijing Rising Technology Co., Ltd. - 0064810c1b03f2c889130b669a4ce937
O41 - ExpScaner - ExpScan.sys - C:\Program Files\rising\rav\ExpScan.sys - (running) - ExpScan.sys -  - 5a690926c7181d5c0b2721016442c9c3
O41 - HookCont - HookCont - C:\Program Files\rising\rav\HookCont.sys - (running) - HookCont - Rising - 3926cb7b005564bc77d6b40235c53817
O41 - HookReg - HookReg - C:\Program Files\rising\rav\HOOKREG.sys - (running) -  -  - 997c395147f8e5b3f714bdd112fe8945
O41 - HookSys - Hooksys - C:\Program Files\rising\rav\Hooksys.sys - (running) - Hooksys - Rising - 265b67f85db6226f2439e13e7c1fa8bf
O41 - MEMSCAN - MemScan Driver - C:\Program Files\rising\rav\MemScan.sys - (running) - MemScan Driver - 瑞星软件有限公司 - 9811b256023dd985cbc5bad790e5bb84
O41 - npkcrypt - nProtect KeyCrypt Driver - D:\Program Files\Tencent\QQ\npkcrypt.sys - (running) - nProtect KeyCrypt Driver - INCA Internet Co., Ltd. - 8bcb281a2540e7aff0cd00f9878fe21f
O41 - PxHelp20 - Px Engine Device Driver for Windows 2000/XP - C:\WINDOWS\system32\drivers\pxhelp20.sys - (running) - Px Engine Device Driver for Windows 2000/XP - Sonic Solutions - fd9d44ec6d99edfa3782f870b7e00682
O41 - RsAntiSpyware - RsBoot - C:\WINDOWS\system32\drivers\RsBoot.sys - (running) - RsBoot - Beijing Rising - 7004bb49aa62317da73a3eba1862eb7f
O41 - RsNTGDI - RsNTGDI - C:\WINDOWS\system32\drivers\RsNTGdi.sys - (running) - RsNTGDI - Beijing Rising Technology Co., Ltd. - 17214e7b192cb93ff014fca1484b97ad
O41 - RSPPSYS - RSPPSYS.SYS - C:\Program Files\rising\rav\rsppsys.sys - (running) - RSPPSYS.SYS - Rising - f38c10d8c21626a4878ea16717e971fa
O41 - xinstall - xinstall - C:\WINDOWS\system32\drivers\xinstall.sys - (running) -  -  - e3256a8418ef95a9cbc237444520f6b3
O41 - kmsinput - kmsinput - C:\WINDOWS\system32\drivers\kmsinput.sys - (not running) -  -  - f8d6ebcb50c02b42c5ffd5393229c6b6
O41 - New0 - New0 - C:\WINDOWS\System32\new.sys - (not running) -  -  -
O41 - sonypvs1 - Sony Digital Imaging - C:\WINDOWS\system32\drivers\sonypvs1.sys - (not running) - Sony Digital Imaging - Sony Corporation - dfadfc2c86662f40759bf02add27d569
O41 - ZSMC301b - Video streaming and Capture Device Driver - C:\WINDOWS\system32\drivers\usbVM31b.sys - (not running) - Video streaming and Capture Device Driver - VM - a0ed603287ec8897b6db8023ff88e2b3

=======================================
360Safe.exe=3.3.0.1001
AntiAdwa.dll=3.3.0.1001
AntiEng.dll=3.3.0.1001
AntiActi.dll=2.0.0.3000
CleanHis.dll=3.0.2.1000
safelive.exe=1.0.0.2007
live.dll=1.0.0.1012

=======================================
操作历史报告：

========Content========
----------清理恶评软件历史----------

2007-02-28 15:45
查杀恶意软件 - 易趣购物按钮 - 危险 -
查杀恶意软件 - 百度超级搜霸 - 危险 - C:\WINDOWS\DOWNLO~1\BDPlugin.dll

2007-03-05 16:06
查杀恶意软件 - 易趣购物按钮 - 危险 -

2007-03-15 18:29
查杀恶意软件 - 易趣购物按钮 - 危险 -

2007-04-23 20:13
清理恶评软件 - 一搜工具条 - HKCR\TYPELIB\{B37E0A2D-9A61-4A95-A0E0-6D6F6123DAB4}

2007-04-26 16:42
清理恶评软件 - 易趣购物按钮 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{DE60714F-AC17-427e-861A-FD60CBDF119A}

2007-04-26 16:42
清理恶评软件 - 腾讯QQ附带的QQIEHelper插件 - HKCR\QQIEHelper.QQBrowserHelperObject.1

2007-04-27 20:15
清理恶评软件 - 腾讯QQ附带的QQIEHelper插件 - HKCU\Software\Microsoft\Internet Explorer\MenuExt\用QQ彩信发送该图片
清理恶评软件 - 易趣购物按钮 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{DE60714F-AC17-427e-861A-FD60CBDF119A}
清理恶评软件 - 伪TIMPlatform.exe木马 - C:\WINDOWS\System32\ctfnom.exe
清理恶评软件 - mppds木马 - C:\WINDOWS\System32\mppds.dll
清理恶评软件 - ystemKb木马 - C:\PROGRA~1\INTERN~1\PLUGINS\system2.jmp
清理恶评软件 - NewInfo木马 - C:\PROGRA~1\COMMON~1\MICROS~1\MSINFO\SYSTEM.2DT
清理恶评软件 - wm恶意软件 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run [wm]: (C:\WINDOWS\Syswm7\svchost.exe)

2007-04-27 20:20
清理恶评软件 - wm恶意软件 -
清理恶评软件 - mppds木马 -
清理恶评软件 - 伪TIMPlatform.exe木马 -
2007-04-27 20:24
清理恶评软件 - 易趣购物按钮 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{DE60714F-AC17-427e-861A-FD60CBDF119A}

2007-04-28 00:24
清理恶评软件 - 腾讯QQ附带的QQIEHelper插件 - HKCU\Software\Microsoft\Internet Explorer\MenuExt\用QQ彩信发送该图片
清理恶评软件 - 易趣购物按钮 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{DE60714F-AC17-427e-861A-FD60CBDF119A}
清理恶评软件 - 伪TIMPlatform.exe木马 - C:\WINDOWS\System32\drivers\usbine.sys

2007-04-28 00:33
清理恶评软件 - 伪TIMPlatform.exe木马 -

----------修复IE浏览器操作历史----------

2007-03-03 14:11
O28 - 危险 - IE链接的参数 - C:\DOCUME~1\xxg\「开始~1\程序\附件\系统工具\INTERN~1.LNK
O28 - 危险 - IE链接的参数 - C:\DOCUME~1\xxg\「开始~1\程序\附件\系统工具\INTERN~2.LNK

=======================================