当前运行的进程：
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\VM_STI.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\ChinaNet\VnetClient.exe
C:\WINDOWS\System32\conime.exe
F:\智能扫描\MagicSet\SRCK.EXE
F:\遨游浏览器\Maxthon\Maxthon.exe
F:\VIKING杀虫剂.com
F:\智能扫描\HijackThis1991zww.exe
R3 - URLSearchHook: (no name) - {DFCB34B6-902D-426E-AE2B-1B294AE19F4F} - (no file)
O2 - BHO: (no name) - {a3a105b6-2a70-4d30-8b0d-4e03f37a8dbf} - C:\WINDOWS\System32\4d30cfsb.dll
O2 - BHO: (no name) - {d6243cd8-e9d2-46dc-ae2b-1b294ae19f4f} - C:\WINDOWS\System32\46dcntos.dll
O3 - IE工具栏增项: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - IE工具栏增项: 快车(FlashGet) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - F:\FlashGet\fgiebar.dll
O3 - IE工具栏增项: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O3 - IE工具栏增项: (no name) - {DFCB34B6-902D-426E-AE2B-1B294AE19F4F} - (no file)
O4 - 启动项HKLM\\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE VIMICRO USB PC Camera
O4 - 启动项HKLM\\Run: [TkBellExe] ; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - 启动项HKLM\\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - 启动项HKLM\\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - 启动项HKLM\\Run: [yyxxi] ; F:\Program Files\yyxxi\English.exe
O4 - 启动项HKLM\\Run: [E:\火影忍者\ttp.exe] E:\火影忍者\ttp.exe
O4 - 启动项HKLM\\RunOnce: [WoptiClean] rundll32.exe "F:\优化大师\WoptiCleanDll.dll",CleanNextBoot "F:\优化大师\\WoptiClean"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O8 - IE右键菜单中的新增项目: &使用快车(FlashGet)下载 - F:\FlashGet\jc_link.htm
O8 - IE右键菜单中的新增项目: &使用快车(FlashGet)下载全部链接 - F:\FlashGet\jc_all.htm
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - E:\QQ\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - E:\QQ\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - E:\QQ\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - E:\QQ\SendMMS.htm
O9 - 浏览器额外的按钮: 相关站点 - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - 浏览器额外的“工具”菜单项: 相关站点 - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - E:\QQ\QQ.EXE
O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - E:\QQ\QQ.EXE
O9 - 浏览器额外的按钮: 快车 - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - F:\FlashGet\FlashGet.exe
O9 - 浏览器额外的“工具”菜单项: 快车(FlashGet) - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - F:\FlashGet\FlashGet.exe
O9 - 浏览器额外的按钮: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\QQ\QQIEHelper.dll (file missing)
O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\QQ\QQIEHelper.dll (file missing)
O16 - DPF: {52DF16E3-6C4F-4B22-8BAF-09263E463B48} - http://zs.kingsoft.com/KOSInit.cab
O16 - DPF: {A96C48EA-AA88-4BBD-B58C-7B41146A6EAC} - http://qz-photo.qq.com/qzone3/QzoneMediaTools.cab
O16 - DPF: {B905F63D-7489-4B3D-9B62-49A1B8647E2A} (HgPluginJP21 Class) - http://down.hangame.co.jp/jp/dist/hgstart/HGPluginJP21.cab
O16 - DPF: {C661F36D-DF85-4EF4-83C7-E107B83D04B1} (WebActivater Control) - http://dl_dir.qq.com/3dshow/3DShowVM.cab
O16 - DPF: {DA984A6D-508E-11D6-AA49-0050FF3C628D} (Ravonline) - http://download.rising.com.cn/QQ/QQkill/rsonline.cab
O16 - DPF: {DDA166FA-B3EA-4A3B-8EE2-4F552CDEEE81} (KATScan Control) - http://ol.db.kingsoft.com/antitrojan/setup/KATScan.CAB
O16 - DPF: {E787FD25-8D7C-4693-AE67-9406BC6E22DF} (CPasswordEditCtrl
Object) - https://password.qq.com/download/qqedit.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{66B08833-BFFA-495D-AB95-40C3BA785589}: NameServer = 218.77.31.200,202.103.83.3
O17 - HKLM\System\CCS\Services\Tcpip\..\{B40A4330-4E42-473F-8E11-FAC4492AAF00}: NameServer = 202.103.83.3 218.77.31.200
O17 - HKLM\System\CS2\Services\Tcpip\..\{66B08833-BFFA-495D-AB95-40C3BA785589}: NameServer = 218.77.31.200,202.103.83.3
O17 - HKLM\System\CS3\Services\Tcpip\..\{66B08833-BFFA-495D-AB95-40C3BA785589}: NameServer = 218.77.31.200,202.103.83.3
O18 - 列举现有的协议: KuGoo3 - {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC} - F:\PROGRA~1\KuGoo3\InExtend\KUGOO3~1.OCX
O23 - NT 服务: ASP.NET State Service (aspnet_state) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - NT 服务: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - NT 服务: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - NT 服务: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - NT 服务: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
