浏览器加载项
[浩方对战平台]
{0A155D3C-68E2-4215-A47A-E800A446447A} <D:\新建文件夹\浩方\浩方对战平台\GameClient.exe, 上海浩方在线信息技术有限公司>
[网址大全]
{1FBA04EE-3024-11D2-8F1F-0000F87ABD18} <http://www.coc.cc, N/A>
[卡卡上网安全助手]
{DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINNT\system32\KakaTool.dll, Beijing Rising Technology Co., Ltd.>
[Office Update Installation Engine]
{3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} <C:\WINNT\opuc.dll, Microsoft Corporation>
[CEditCtrl
Object]
{488A4255-3236-44B3-8F27-FA1AECAA8844} <c:\WINNT\system32\aliedit\aliedit.dll, www.alipay.com>
[MSN Photo Upload Tool]
{4F1E5B1A-2A80-42CA-8532-2D05CB959537} <C:\WINNT\Downloaded Program Files\MsnPUpld.dll, Microsoft? Corporation>
[MsnMessengerSetupDownloadControl Class]
{B38870E4-7ECB-40DA-8C6A-595F0A5519FF} <C:\WINNT\Downloaded Program Files\MsnMessengerSetupDownloader.ocx, Microsoft Corporation>
[Shockwave Flash
Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINNT\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[WangWangObj Class]
{6E213FC7-DD5A-4115-B7E6-D4C7838C361E} <G:\Program Files\淘宝网\淘宝旺旺\WangWangX3.dll, 淘宝（中国）软件有限公司>
[&使用迅雷下载]
<G:\工具\商务\Program\GetUrl.htm, N/A>
[&使用迅雷下载全部链接]
<G:\工具\商务\Program\GetAllUrl.htm, N/A>
[上传到QQ网络硬盘]
<F:\qq\AddToNetDisk.htm, N/A>
[添加到QQ自定义面板]
<F:\qq\AddPanel.htm, N/A>
[添加到QQ表情]
<F:\qq\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<F:\qq\SendMMS.htm, N/A>
==================================
正在运行的进程
[PID: 192][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.00.2195.6601]
[PID: 152][\??\C:\WINNT\system32\csrss.exe] [Microsoft Corporation, 5.00.2195.6601]
[PID: 120][\??\C:\WINNT\system32\winlogon.exe] [Microsoft Corporation, 5.00.2195.6997]
[PID: 224][C:\WINNT\system32\services.exe] [Microsoft Corporation, 5.00.2195.7035]
[C:\WINNT\system32\dmserver.dll] [VERITAS Software Corp., 2195.6605.297.3]
[PID: 236][C:\WINNT\system32\lsass.exe] [Microsoft Corporation, 5.00.2195.7011]
[PID: 384][c:\program files\rising\rfw\rfwsrv.exe] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 30]
[c:\program files\rising\rfw\RfwRule.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 3]
[c:\program files\rising\rfw\rfwlog.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 2]
[c:\program files\rising\rfw\Rfwdrv.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 9]
[c:\program files\rising\rfw\MonDrv.dll] [rs, 1, 0, 0, 4]
[c:\program files\rising\rfw\ProcLib.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 5]
[c:\program files\rising\rfw\mPorts.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3]
[PID: 396][C:\WINNT\system32\svchost.exe] [Microsoft Corporation, 5.00.2134.1]
[PID: 420][C:\Program Files\Rising\Rav\CCenter.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3]
[PID: 532][C:\WINNT\system32\svchost.exe] [Microsoft Corporation, 5.00.2134.1]
[PID: 552][C:\PROGRA~1\MICROS~3\MSSQL\binn\sqlservr.exe] [Microsoft Corporation, 2000.080.0194.00]
[PID: 648][C:\WINNT\system32\nvsvc32.exe] [NVIDIA Corporation, 6.13.10.2832]
[PID: 676][C:\WINNT\System32\SCardSvr.exe] [Microsoft Corporation, 5.00.2195.6609]
[PID: 732][C:\Program Files\Rising\Rav\RavStub.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 4]
[C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1]
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[PID: 812][d:\Weway\GraspFZ90\scktsrvr.exe] [Inprise Corporation, 5.0.5.62]
[PID: 868][C:\WINNT\system32\stisvc.exe] [Microsoft Corporation, 5.00.2195.6656]
[PID: 904][C:\WINNT\System32\WBEM\WinMgmt.exe] [Microsoft Corporation, 1.50.1085.0100]
[PID: 924][C:\WINNT\System32\svchost.exe] [Microsoft Corporation, 5.00.2134.1]
[c:\winnt\arwsdog.dll] [N/A, N/A]
[PID: 956][C:\WINNT\system32\svchost.exe] [Microsoft Corporation, 5.00.2134.1]
[PID: 1572][C:\WINNT\Explorer.EXE] [Microsoft Corporation, 5.00.3700.6690]
[C:\WINNT\ArWs.DLL] [, 1, 0, 0, 1]
[C:\WINNT\ArsDbClient.dll] [, 1, 0, 0, 1]
[C:\WINNT\ArComm.dll] [, 1, 0, 0, 1]
[C:\WINNT\ArWsDog.dll] [N/A, N/A]
[C:\WINNT\TaskMgr.dll] [N/A, N/A]
[C:\WINNT\ArsFile.dll] [, 1, 0, 0, 1]
[C:\WINNT\ArLib.dll] [, 1, 0, 0, 1]
[C:\WINNT\zlib.dll] [N/A, N/A]
[C:\WINNT\ArsDb.dll] [, 1, 0, 0, 1]
[C:\WINNT\ChatCapture.dll] [, 1, 0, 0, 1]
[C:\WINNT\HookDll.dll] [, 1, 0, 0, 1]
[C:\WINNT\CapScreen.dll] [, 1, 0, 0, 1]
[C:\WINNT\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 7]
[C:\WINNT\ArShell.Dll] [N/A, N/A]
[G:\工具\反病毒\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[C:\Program Files\WinRAR\rarext.dll] [N/A, N/A]
[PID: 1700][C:\WINNT\SOUNDMAN.EXE] [Avance Logic, Inc., 5.0.05]
[G:\工具\反病毒\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[C:\WINNT\HookDll.dll] [, 1, 0, 0, 1]
[PID: 1888][C:\WINNT\system32\SafeSignCertReg.exe] [A.E.T. Europe B.V., 2.0.0.2]
[PID: 1940][G:\工具\反病毒\runiep.exe] [Beijing Rising Technology Co., Ltd., 1, 0, 1, 3]
[G:\工具\反病毒\iep_ctrl.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 4]
[G:\工具\反病毒\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[C:\WINNT\HookDll.dll] [, 1, 0, 0, 1]
[PID: 1904][C:\WINNT\system32\ctfmon.exe] [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
[G:\工具\反病毒\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[C:\WINNT\HookDll.dll] [, 1, 0, 0, 1]
[PID: 1956][C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe] [Microsoft Corporation, 2000.080.0194.00]
[G:\工具\反病毒\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[C:\WINNT\HookDll.dll] [, 1, 0, 0, 1]
[PID: 1964][G:\工具\娱乐\ADSL超频奇兵 V4.1\ADSLx2.exe] [奇兵软件 Worldfax.net, 4.1.0.1]
[C:\WINNT\system32\addurl41.dll] [N/A, N/A]
[G:\工具\反病毒\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[C:\WINNT\HookDll.dll] [, 1, 0, 0, 1]
[PID: 1984][G:\工具\娱乐\UUCall3.exe] [UUCall Inc., 3,0,3415,0]
[PID: 1984][C:\WINNT\winhlp32.exe] [Microsoft Corporation, 5.00.2195.6601]
[C:\WINNT\HookDll.dll] [, 1, 0, 0, 1]
[G:\工具\反病毒\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[C:\WINNT\system32\YLUSBTEL.dll] [, 2, 0, 0, 4]
[PID: 2116][G:\工具\Hijackthis1991zww\HijackThis1991zww.exe] [Soeperman Enterprises Ltd., 1.99.0001]
[C:\WINNT\HookDll.dll] [, 1, 0, 0, 1]
[G:\工具\反病毒\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[PID: 2052][C:\Program Files\Internet Explorer\IEXPLORE.EXE] [Microsoft Corporation, 5.00.2920.0000]
[C:\WINNT\HookDll.dll] [, 1, 0, 0, 1]
[C:\WINNT\system32\KakaTool.dll] [Beijing Rising Technology Co., Ltd., 2, 0, 2, 6]
[G:\工具\反病毒\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[C:\WINNT\system32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,16,0]
[PID: 1576][G:\工具\反病毒\sreng2\SREng\SREng.exe] [Smallfrogs Studio, 2.2.6.605]
[C:\WINNT\HookDll.dll] [, 1, 0, 0, 1]
[G:\工具\反病毒\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINNT\hh.exe" %1]
.HLP OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
