2007-05-15,10:47:49

System Repair Engineer 2.2.6.605
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 1 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\System32\ctfmon.exe>  [(Verified)Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
    <run><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <PHIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [(Verified)Microsoft Corporation]
    <SoundMan><SOUNDMAN.EXE>  [(Verified)Realtek Semiconductor Corp.]
    <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup>  [(Verified)NVIDIA Corporation]
    <nwiz><nwiz.exe /install>  [NVIDIA Corporation]
    <EPSON Stylus Photo R230 Series><C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIP.EXE /P30 "EPSON Stylus Photo R230 Series" /O6 "USB003" /M "Stylus Photo R230">  [(Verified)SEIKO EPSON CORPORATION]
    <PHIME2002A><; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [(Verified)Microsoft Corporation]
    <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system>  [Beijing Rising Technology Co., Ltd.]
    <Thunder><"C:\Program Files\Thunder Network\Thunder\Thunder.exe" /s>  [Thunder Networking Technologies,LTD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
    <twin><C:\WINDOWS\System32\ctfnom.exe>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Corporation]
    <Userinit><C:\WINDOWS\System32\userinit.exe,>  [(Verified)Microsoft Corporation]
    <UIHost><logonui.exe>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll>  [Beijing Rising Technology Co., Ltd.]

==================================
启动文件夹
[Microsoft Office]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Microsoft Office.lnk --> C:\PROGRA~1\MICROS~2\Office10\OSA.EXE [Microsoft Corporation]><H>
[QQ游戏启动加速程序]
  <C:\Documents and Settings\xiao tian shi\「开始」菜单\程序\启动\QQ游戏启动加速程序.lnk --> D:\QQGAME\Accel.exe [N/A]><N>
[腾讯QQ]
  <C:\Documents and Settings\xiao tian shi\「开始」菜单\程序\启动\腾讯QQ.lnk --> D:\001\QQ.exe [TENCENT]><N>

==================================
服务
[Adobe LM Service / Adobe LM Service]
  <"C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"><N/A>
[Performance Moniter / BRGNS]
  <C:\WINDOWS\SYSTEM32\RUNDLL2KXP.EXE C:\WINDOWS\SYSTEM32\WBEM\UKAWE.DLL,Export 1087><Microsoft Corporation>
[Office Backup Engine / ClipArt]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\System32\ngypi.dll><Microsoft Corporation>
[EPSON Printer Status Agent2 / EPSONStatusAgent2]
  <C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe><SEIKO EPSON CORPORATION>
[Human Interface Device Access / HidServ]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[NVIDIA Display Driver Service / NVSvc]
  <C:\WINDOWS\System32\nvsvc32.exe><NVIDIA Corporation>
[Rising Process Communication Center / RsCCenter]
  <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[Rising RealTime Monitor / RsRavMon]
  <"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[Win32 Display Driver / Win32DDS]
  <><N/A>

==================================
驱动程序
[Service for Realtek AC97 Audio (WDM) / ALCXWDM]
  <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
[Rising TDI Base Driver / BaseTDI]
  <System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.>
[CelInDrv / CelInDrv]
  <\??\C:\WINDOWS\System32\Drivers\CelInDriver.sys><N/A>
[Intel(R) PRO Adapter Driver / E100B]
  <System32\DRIVERS\e100b325.sys><Intel Corporation>
[ExpScaner / ExpScaner]
  <\??\C:\PROGRAM FILES\RISING\RAV\ExpScan.sys><>
[HookCont / HookCont]
  <\??\C:\PROGRAM FILES\RISING\RAV\HOOKCONT.sys><Rising>
[hookreg / hookreg]
  <\??\C:\Program Files\Rising\Rav\hookreg.sys><>
[HookSys / HookSys]
  <\??\C:\PROGRAM FILES\RISING\RAV\HookSys.sys><Rising>

[C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FDSPAIP.DLL]  [SEIKO EPSON Corporation, 0. 3. 1. 13]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FJBCAIP.DLL]  [SEIKO EPSON Corporation, 0.1.8.02]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FGRCAIP.DLL]  [SEIKO EPSON CORP., 2.0.1]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FUIRAIP.DLL]  [精工爱普生株式会社, 0.3.0.8]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FCONAIP.DLL]  [SEIKO EPSON Corporation, 2.17]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FHM0AIP.DLL]  [SEIKO EPSON CORP., 4.0.0.0]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FHT0AIP.DLL]  [SEIKO EPSON CORP., 3.0.0]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FMW0AIP.DLL]  [SEIKO EPSON CORP., 3.0.1]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FSR0AIP.DLL]  [SEIKO EPSON CORP., 3.0.1]
[PID: 1620][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2800.1221 (xpsp2.030511-1403)]
    [C:\WINDOWS\system32\RavExt.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9]
    [C:\WINDOWS\system32\giwfe.dll]  [N/A, N/A]
    [C:\Program Files\Common Files\Ahead\lib\NeroDigitalExt.dll]  [Nero AG, 2, 0, 0, 8]
    [C:\Program Files\Common Files\Ahead\lib\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Common Files\Ahead\lib\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\Common Files\Ahead\lib\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\System32\nvshell.dll]  [NVIDIA Corporation, 6.14.10.5303]
    [C:\WINDOWS\System32\NVWRSZHC.DLL]  [NVIDIA Corporation, 6.14.10.5303]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
    [C:\Program Files\Nero\Nero 7\Nero BackItUp\NBShell.dll]  [Nero AG, 2, 0, 6, 2]
    [C:\Program Files\Nero\Nero 7\Nero BackItUp\MFC71U.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\WINWB98.IME]  [Microsoft Corporation, 4.00.950]
[PID: 1704][C:\WINDOWS\SOUNDMAN.EXE]  [Realtek Semiconductor Corp., 5.1.00]
[PID: 1736][C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIP.EXE]  [SEIKO EPSON CORPORATION, 4.00]
[PID: 1804][C:\WINDOWS\System32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
[PID: 1812][C:\Program Files\Thunder Network\Thunder\Program\Thunder5.exe]  [Thunder Networking Technologies,LTD, 5, 5, 6, 274]
    [C:\Program Files\Thunder Network\Thunder\Program\TaskManager.dll]  [Thunder Networking Technologies,LTD, 1, 0, 2, 14]
    [C:\Program Files\Thunder Network\Thunder\Program\download_interface.dll]  [Thunder Networking Technologies,LTD, 2, 12, 2, 56]
    [C:\Program Files\Thunder Network\Thunder\Program\asyn_dns.dll]  [Thunder Networking Technologies,LTD, 2, 12, 2, 56]
    [C:\Program Files\Thunder Network\Thunder\Program\iTargetAD.dll]  [Thunder Networking Technologies,LTD, 1, 0, 2, 16]
    [C:\Program Files\Thunder Network\Thunder\Program\BHOStub.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 8]
    [C:\WINDOWS\System32\Macromed\Flash\Flash9c.ocx]  [Adobe Systems, Inc., 9,0,45,0]
    [C:\Program Files\Thunder Network\Thunder\Components\DiagnoseHelper\DiagnoseHelper.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 10]
    [C:\Program Files\Thunder Network\Thunder\Components\PortVerify\PortVerify.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
    [C:\Program Files\Thunder Network\Thunder\Components\ExplorerHelper\ExplorerHelper.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
    [C:\Program Files\Thunder Network\Thunder\Components\DTAG\DTAG.dll]  [Thunder Networking Technologies,LTD, 1, 1, 0, 2]
    [C:\Program Files\Thunder Network\Thunder\Components\DTAG\ExtractMediaTag.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
    [C:\WINDOWS\System32\WMASF.DLL]  [Microsoft Corporation, 9.00.00.2980 built by: lab03_dev(bld4act)]

[C:\Program Files\Thunder Network\Thunder\Program\LiveUpdate.dll]  [, 1, 0, 1, 17]
    [C:\Program Files\Thunder Network\Thunder\Components\InMedia\iEmbedShell.dll]  [　, 1, 0, 0, 15]
    [C:\Program Files\Thunder Network\WebThunder\iEmbed09.dll]  [　, 3, 3, 0, 78]
    [C:\Program Files\Thunder Network\Thunder\Components\Community\XLCommunity.dll]  [Thunder Networking Technologies,LTD, 1, 0, 4, 15]
    [C:\Program Files\Thunder Network\Thunder\Program\RegisterDll.dll]  [Thunder Networking Technologies,LTD, 2, 2, 1, 43]
    [C:\Program Files\Thunder Network\Thunder\Components\Search\XLSearch.dll]  [Thunder Networking Technologies,LTD, 1, 0, 2, 7]
    [C:\Program Files\Thunder Network\Thunder\Components\P4PClient\P4PClient.dll]  [Thunder Networking Technologies,LTD, 1, 0, 2, 14]
    [C:\Program Files\Thunder Network\Thunder\Components\VPSHELL\VPSHELL.dll]  [, 1, 1, 0, 4]
    [C:\Program Files\Thunder Network\Thunder\Components\VPSHELL\VideoPicture.dll]  [XunLei, 1, 1, 0, 4]
    [C:\Program Files\Thunder Network\Thunder\Components\Tips\TipsClient.dll]  [Thunder Networking Technologies,LTD, 2, 1, 1, 50]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\Program Files\Thunder Network\Thunder\Plugins\BhoAdv\bho_adv.dll]  [深圳市迅雷网络技术有限公司, 1.0.1.0]
    [C:\Program Files\Thunder Network\Thunder\Plugins\ThunderKAV\ThunderKAV.dll]  [深圳市迅雷网络技术有限公司, 1.0.1.17]
    [C:\Program Files\Thunder Network\Thunder\Program\XLNet.Dll]  [Xunlei, 1, 1, 0, 6]
[PID: 1984][C:\WINDOWS\System32\conime.exe]  [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
[PID: 156][C:\WINDOWS\SYSTEM32\RUNDLL2KXP.EXE]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINDOWS\SYSTEM32\WBEM\UKAWE.DLL]  [Microsoft Corporation, 5, 1, 2600, 2709]
[PID: 220][C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe]  [SEIKO EPSON CORPORATION, 2, 3, 0, 0]
    [C:\WINDOWS\System32\EBAPI2.DLL]  [SEIKO EPSON CORPORATION, 1, 4, 0, 0]
    [C:\Program Files\Common Files\EPSON\EBAPI\EBPLPT.DLL]  [SEIKO EPSON CORPORATION, 2, 26, 0, 0]
[PID: 384][C:\WINDOWS\System32\nvsvc32.exe]  [NVIDIA Corporation, 6.14.10.5303]
[PID: 436][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 2584][D:\qq07\cmqq2007beta1v162\新建文件夹\qq\QQ.exe]  [TENCENT, 0, 0, 0, 0]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\CoralAssist.dll]  [Coral Team, 5.0.0 build 20060829]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\CoralQQ.dll]  [Coral Team, 5.0 Build 20070309]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\KQL.dll]  [Coral Team, 5.0.0 build 20070301]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\MSVCP80.dll]  [Microsoft Corporation, 8.00.50727.42]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\MSVCR80.dll]  [Microsoft Corporation, 8.00.50727.42]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\MFC42.DLL]  [Microsoft Corporation, 6.00.8665.0]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\IPSearcher.dll]  [, 1.0.0.3]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\BasicCtrlDll.dll]  [Tencent, 7, 0, 101, 80]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\NoDisturbFilter.cqx]  [Coral Team, 1.0]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\RICHED32.DLL]  [Microsoft Corporation, 5.00.2134.1]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\RICHED20.dll]  [Microsoft Corporation, 5.31.23.1218]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\QQAPI.dll]  [, 1, 0, 0, 1]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\AutoReconnect.cqx]  [Coral Team, 1.0.0]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\LoginCtrl.dll]  [N/A, N/A]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\npkcntc.dll]  [INCA Internet Co., Ltd., 2006, 6, 27, 1]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\LoginCtrlRes.dll]  [, 1, 0, 0, 1]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\QQRes.dll]  [tencent, 1, 0, 0, 1]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\WizardCtrl.dll]  [, 1, 0, 0, 1]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\QQMainFrame.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\Macromed\Flash\Flash9c.ocx]  [Adobe Systems, Inc., 9,0,45,0]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\CQQApplication.dll]  [N/A, N/A]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\NewSkin.dll]  [, 1, 0, 0, 1]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\HostingMgr.dll]  [, 1, 0, 0, 1]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\CameraDll.dll]  [, 1, 0, 0, 1]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\MailSummary.dll]  [, 1, 0, 0, 1]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\CoralHotkey.cqx]  [Coral Team, 1.0]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\QQKnowledgeSearch.dll]  [, 1, 0, 0, 1]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\QQAllInOne.dll]  [N/A, N/A]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\GroupLive.dll]  [N/A, N/A]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\SCCore.dll]  [TENCENT, 2, 0, 0, 1]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\gdiplus.dll]  [Microsoft Corporation, 5.1.3102.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\QQSpace.dll]  [, 1, 0, 0, 1]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\vbscript.dll]  [Microsoft Corporation, 5.6.0.7426]
    [C:\WINDOWS\System32\msdmo.dll]  [N/A, N/A]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\QQPlugin.dll]  [N/A, N/A]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\QQCustomFace.dll]  [N/A, N/A]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\QQPet.dll]  [, 1, 0, 0, 1]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\QQSysMsgMng.dll]  [N/A, N/A]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\LongConnection.dll]  [tencent, 5, 0, 200, 160]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\GroupConnection.dll]  [Tencent, 0, 3, 3, 5]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\QRingMng.dll]  [N/A, N/A]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\QQAvatar.dll]  [N/A, N/A]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\OEMApplication.dll]  [, 1, 0, 0, 1]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\ImageOle.dll]  [TODO: <Company name>, 1.0.0.1]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\QQMagicFace.dll]  [, 1, 0, 0, 1]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\QQSceneMng.dll]  [N/A, N/A]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\BQQApplication.dll]  [N/A, N/A]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\CommercesMng.dll]  [, 1, 0, 0, 1]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 280]
    [c:\windows\system32\ngypi.dll]  [Microsoft Corporation, 5.1.2600.0]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\QQPhoneHelper.dll]  [腾讯科技（深圳）有限公司, 2, 1, 8, 81]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\QQFileTransfer.dll]  [Tencent, 0, 3, 3, 5]
[PID: 2772][D:\001\TIMPlatfrom.exe]  [tencent, 0, 3, 1, 8]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
[PID: 972][C:\Program Files\Rising\Rav\RavStub.exe]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 4]

    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[PID: 812][C:\Program Files\Adobe\Photoshop CS\Photoshop.exe]  [Adobe Systems, Incorporated, 8.0.1 (8.0x125)]
    [C:\Program Files\Adobe\Photoshop CS\UID.mr.dll]  [Adobe Systems, Inc., 1, 1, 0, 0]
    [C:\Program Files\Adobe\Photoshop CS\AWSCommonUI.dll]  [Adobe Systems, Incorporated, 3.0.0.432]
    [C:\Program Files\Adobe\Photoshop CS\AWSSCL.dll]  [Adobe Systems, 4.0.0.34]
    [C:\Program Files\Adobe\Photoshop CS\WebAccessUtils.dll]  [Adobe Systems, Incorporated, 3.0.0.432]
    [C:\Program Files\Adobe\Photoshop CS\BIBUtils.dll]  [Adobe Systems Incorporated, 1.00.0]
    [C:\Program Files\Adobe\Photoshop CS\Photoshop.dll]  [N/A, N/A]
    [C:\Program Files\Adobe\Photoshop CS\PSViews.dll]  [Adobe Systems, Incorporated, 8.0.1 (8.0x125)]
    [C:\Program Files\Adobe\Photoshop CS\PSArt.dll]  [Adobe Systems, Incorporated, 8.0.1 (8.0x125)]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FUICAIP.DLL]  [SEIKO EPSON CORP., 0. 3. 40, 31]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FMAIAIP.DLL]  [SEIKO EPSON Corporation, 0. 3. 1. 26]
    [C:\WINDOWS\System32\icm32.dll]  [Microsoft Corporation, 5.00]
    [C:\Program Files\Adobe\Photoshop CS\asn.er.dll]  [Adobe Systems Incorporated, 1.51x3, EndUser, Release]
    [C:\Program Files\Adobe\Photoshop CS\增效工具\扩展\FastCore.8BX]  [Adobe Systems, Incorporated, 8.0.1 (8.0x126)]
    [C:\Program Files\Adobe\Photoshop CS\PLUGIN.dll]  [Adobe Systems, Incorporated, 8.0.1 (8.0x125)]
    [C:\Program Files\Adobe\Photoshop CS\增效工具\扩展\MMXCore.8BX]  [Adobe Systems, Incorporated, 8.0.1 (8.0x126)]
    [C:\Program Files\Adobe\Photoshop CS\Required\ADMPlugin.apl]  [Adobe Systems Incorporated, 2.84pe69a 02.06.17-00:03:36h]
    [C:\Program Files\Adobe\Photoshop CS\Required\PNGIcons.apl]  [Adobe Systems Incorporated, 1.21x7 2001.12.14-1602h.21s]
    [C:\Program Files\Adobe\Photoshop CS\Required\ASDataStream.apl]  [Adobe Systems Incorporated, 1.02x7 02.02.15-01:45:06h]
    [C:\Program Files\Adobe\Photoshop CS\增效工具\解析程序\PDF 增效工具.8BI]  [Adobe Systems, Incorporated, 8.0.1 (8.0x126)]
    [C:\Program Files\Adobe\Photoshop CS\BIB.dll]  [Adobe Systems Incorporated, 1.1.16]
    [C:\Program Files\Adobe\Photoshop CS\JP2KLib.dll]  [Adobe systems Incorporated, 1.0.28706]
    [C:\Program Files\Adobe\Photoshop CS\增效工具\文件格式\Camera Raw.8BI]  [Adobe Systems Incorporated, 2.0]
    [C:\Program Files\Adobe\Photoshop CS\ACE.dll]  [Adobe Systems Incorporated, 2.05.16]
    [C:\Program Files\Adobe\Photoshop CS\AGM.dll]  [Adobe Systems Incorporated, 4.12.36]
    [C:\Program Files\Adobe\Photoshop CS\CoolType.dll]  [Adobe Systems Incorporated, 4.14.20]
    [C:\WINDOWS\System32\ATMLIB.dll]  [Adobe Systems, 5.1 Build 225]
    [C:\Program Files\Adobe\Photoshop CS\AWSCommonSymbols.dll]  [Adobe Systems, Incorporated, 3.0.0.432]
    [C:\Program Files\Adobe\Photoshop CS\ARM.dll]  [Adobe Systems, Incorporated, 3.0.0.432]
    [C:\Program Files\Adobe\Photoshop CS\shfolder.dll]  [Microsoft Corporation, 5.50.4027.300]
    [C:\Program Files\Adobe\Photoshop CS\FileInfo.dll]  [Adobe Systems, Incorporated, 3.0.0.432]
    [C:\Program Files\Adobe\Photoshop CS\增效工具\Adobe Photoshop Only\自动\脚本支持.8li]  [Adobe Systems Incorporated, 8.0]
    [C:\Program Files\Adobe\Photoshop CS\ExtendScriptIDE.dll]  [Adobe Systems, Incorporated, 3.2.21]
    [C:\Program Files\Adobe\Photoshop CS\ExtendScript.dll]  [Adobe Systems, Incorporated, 3.2.21]
    [C:\Program Files\Adobe\Photoshop CS\ScCore.dll]  [Adobe Systems, Incorporated, 3.2.21]
    [C:\Program Files\Adobe\Photoshop CS\MSVCP60.dll]  [Microsoft Corporation, 6.00.8972.0]
    [C:\WINDOWS\System32\UNISPIM.IME]  [北京清华紫光软件股份有限公司, 3.0.0.3045]
    [C:\WINDOWS\System32\upengine.dll]  [北京清华紫光软件股份有限公司, 3.0.0.3045]
    [C:\Program Files\Common Files\Ahead\lib\NeroDigitalExt.dll]  [Nero AG, 2, 0, 0, 8]
    [C:\Program Files\Common Files\Ahead\lib\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Common Files\Ahead\lib\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\Common Files\Ahead\lib\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Adobe\Photoshop CS\Tw10122.dat]  [Adobe Systems, Incorporated, 8.0.1 (8.0x125)]
[PID: 3908][C:\Program Files\ACD Systems\ACDSee\8.0\ACDSee8.exe]  [ACD Systems Ltd., 8,0,39,0]
    [C:\Program Files\ACD Systems\ACDSee\8.0\ACDInTouch53.dll]  [ACD Systems Inc., 5,3,12,0]
    [C:\Program Files\ACD Systems\ACDSee\8.0\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\ACD Systems\ACDSee\8.0\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\ACD Systems\ACDSee\8.0\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\ACD Systems\ACDSee\8.0\ipwssl5.dll]  [/n software inc. - www.nsoftware.com, 5.0.0.852]
    [C:\Program Files\ACD Systems\ACDSee\8.0\ACDCLClient30.dll]  [ACD SYSTEMS, 3,0,23,1]
    [C:\Program Files\ACD Systems\ACDSee\8.0\ShellIntMgr30.dll]  [ACD Systems Ltd., 3,1,54,0]
    [C:\Program Files\Common Files\ACD Systems\PlugIns2\IDE_ACDStd.apl]  [ACD Systems, Ltd., 3,2,62,0]
    [C:\Program Files\Common Files\Ahead\lib\MediaLibraryNSE.dll]  [Nero AG, 1, 0, 2, 14]
    [C:\Program Files\Common Files\Ahead\lib\MFC71U.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Common Files\Ahead\lib\NMDataServices.dll]  [Nero AG, 1, 0, 2, 14]
    [C:\Program Files\Common Files\Ahead\lib\NMPluginBase.dll]  [Nero AG, 1, 0, 2, 14]
    [C:\Program Files\Common Files\Ahead\lib\NMCoFoundation.dll]  [Nero AG, 1, 0, 2, 14]
    [C:\Program Files\Common Files\Ahead\lib\NMVDS.dll]  [Nero AG, 1, 0, 2, 14]
    [C:\Program Files\Common Files\Ahead\lib\NMIndexStoreSvrPS.dll]  [Nero AG, 1, 0, 2, 14]
    [C:\Program Files\Common Files\ACD Systems\PlugIns2\IDE_PSD.apl]  [ACD Systems Ltd., 3,1,36,0]
    [C:\WINDOWS\System32\WINWB98.IME]  [Microsoft Corporation, 4.00.950]
[PID: 2248][C:\Program Files\Common Files\Ahead\lib\NMIndexStoreSvr.exe]  [Nero AG, 1, 0, 2, 14]
    [C:\Program Files\Common Files\Ahead\lib\NMSQLDB.dll]  [Nero AG, 1, 0, 2, 14]
    [C:\Program Files\Common Files\Ahead\lib\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Common Files\Ahead\lib\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\Common Files\Ahead\lib\NMIndexStoreSvrPS.dll]  [Nero AG, 1, 0, 2, 14]
    [C:\Program Files\Common Files\Ahead\lib\NMLogCxx.dll]  [Nero AG, 1, 0, 2, 14]
    [C:\Program Files\Common Files\Ahead\lib\log4cxx.dll]  [Nero AG, 1, 0, 0, 0]
    [C:\Program Files\Common Files\Ahead\lib\NMCoFoundation.dll]  [Nero AG, 1, 0, 2, 14]
    [C:\Program Files\Common Files\Ahead\lib\NMDataServices.dll]  [Nero AG, 1, 0, 2, 14]
    [C:\Program Files\Common Files\Ahead\lib\NMPluginBase.dll]  [Nero AG, 1, 0, 2, 14]
    [C:\Program Files\Common Files\Ahead\lib\AdvrCntr2.dll]  [Nero AG, 2,5,0, 5900]
[PID: 860][C:\WINDOWS\System32\taskmgr.exe]  [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
[PID: 2936][C:\Program Files\Microsoft Office\Office10\WINWORD.EXE]  [Microsoft Corporation, 10.0.2627]

[C:\Program Files\Common Files\Microsoft Shared\office10\mso.dll]  [Microsoft Corporation, 10.0.2625]
    [C:\Program Files\Common Files\Microsoft Shared\office10\riched20.dll]  [Microsoft Corporation, 5.40.11.2210]
    [C:\Program Files\Rising\Rav\RsPlugIn.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 14]
    [C:\WINDOWS\System32\WINWB98.IME]  [Microsoft Corporation, 4.00.950]
    [C:\Program Files\Microsoft Office\Office10\msostyle.dll]  [Microsoft Corporation, 10.0.2219]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FMAIAIP.DLL]  [SEIKO EPSON Corporation, 0. 3. 1. 26]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FUICAIP.DLL]  [SEIKO EPSON CORP., 0. 3. 40, 31]
    [C:\WINDOWS\System32\icm32.dll]  [Microsoft Corporation, 5.00]
    [C:\Program Files\Common Files\Microsoft Shared\Proof\mslid.dll]  [Microsoft Corporation, 1.0.2305]
    [C:\Program Files\Common Files\Ahead\lib\NeroDigitalExt.dll]  [Nero AG, 2, 0, 0, 8]
    [C:\Program Files\Common Files\Ahead\lib\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Common Files\Ahead\lib\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\Common Files\Ahead\lib\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
[PID: 2020][C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FAMTAIP.EXE]  [SEIKO EPSON CORPORATION, 4.00]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FASRAIP.DLL]  [N/A, N/A]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FAPRAIP.DLL]  [SEIKO EPSON CORPORATION, 4.00]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FBAPAIP.DLL]  [SEIKO EPSON CORPORATION, 5, 2, 1, 0]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FBLPAIP.DLL]  [SEIKO EPSON CORPORATION, 5, 6, 0, 0]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EBPSHRE4.DLL]  [SEIKO EPSON CORPORATION, 1, 2, 0, 0]
    [C:\WINDOWS\System32\E_FBCBAIP.DLL]  [SEIKO EPSON CORPORATION, 2, 0, 0, 27]
    [C:\WINDOWS\System32\E_FBCHAIP.DLL]  [SEIKO EPSON CORPORATION, 1, 1, 0, 0]
[PID: 1448][C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FARNAIP.EXE]  [SEIKO EPSON CORPORATION, 4.00]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FAPRAIP.DLL]  [SEIKO EPSON CORPORATION, 4.00]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FASRAIP.DLL]  [N/A, N/A]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FBAPAIP.DLL]  [SEIKO EPSON CORPORATION, 5, 2, 1, 0]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FBLPAIP.DLL]  [SEIKO EPSON CORPORATION, 5, 6, 0, 0]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EBPSHRE4.DLL]  [SEIKO EPSON CORPORATION, 1, 2, 0, 0]
    [C:\WINDOWS\System32\E_FBCBAIP.DLL]  [SEIKO EPSON CORPORATION, 2, 0, 0, 27]
    [C:\WINDOWS\System32\E_FBCHAIP.DLL]  [SEIKO EPSON CORPORATION, 1, 1, 0, 0]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FGRCAIP.DLL]  [SEIKO EPSON CORP., 2.0.1]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FUICAIP.DLL]  [SEIKO EPSON CORP., 0. 3. 40, 31]
[PID: 3480][D:\001\QQ.exe]  [TENCENT, 0, 0, 0, 0]
    [D:\001\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [D:\001\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [D:\001\BasicCtrlDll.dll]  [Tencent, 6, 0, 200, 320]
    [D:\001\MFC42.DLL]  [Microsoft Corporation, 6.00.8665.0]
    [D:\001\RICHED32.DLL]  [Microsoft Corporation, 5.00.2134.1]
    [D:\001\RICHED20.dll]  [Microsoft Corporation, 5.31.23.1218]
    [D:\001\QQAPI.dll]  [, 1, 0, 0, 1]
    [D:\qq07\cmqq2007beta1v162\新建文件夹\qq\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [D:\001\LoginCtrl.dll]  [, 1, 0, 0, 1]
    [D:\001\QQRes.dll]  [tencent, 1, 0, 0, 1]
    [D:\001\WizardCtrl.dll]  [, 1, 0, 0, 1]
    [D:\001\QQMainFrame.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\Macromed\Flash\Flash9c.ocx]  [Adobe Systems, Inc., 9,0,45,0]
    [D:\001\CQQApplication.dll]  [N/A, N/A]
    [D:\001\NewSkin.dll]  [, 1, 0, 0, 1]
    [D:\001\HostingMgr.dll]  [, 1, 0, 0, 1]
    [D:\001\CameraDll.dll]  [, 1, 0, 0, 1]
    [D:\001\MailSummary.dll]  [, 1, 0, 0, 1]
    [D:\001\QQKnowledgeSearch.dll]  [, 1, 0, 0, 1]
    [D:\001\QQAllInOne.dll]  [N/A, N/A]
    [D:\001\GroupLive.dll]  [N/A, N/A]
    [D:\001\SCCore.dll]  [TENCENT, 2, 0, 0, 1]
    [D:\001\gdiplus.dll]  [Microsoft Corporation, 5.1.3102.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\001\QQSpace.dll]  [, 1, 0, 0, 1]
    [D:\001\vbscript.dll]  [Microsoft Corporation, 5.6.0.7426]
    [C:\WINDOWS\System32\msdmo.dll]  [N/A, N/A]
    [D:\001\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [D:\001\QQSysMsgMng.dll]  [N/A, N/A]
    [D:\001\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [D:\001\QQPlugin.dll]  [N/A, N/A]
    [D:\001\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [D:\001\QRingMng.dll]  [N/A, N/A]
    [D:\001\QQAvatar.dll]  [N/A, N/A]
    [D:\001\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [D:\001\LongConnection.dll]  [tencent, 5, 0, 200, 160]
    [D:\001\PhoneAPI.dll]  [, 1, 0, 0, 1]
    [D:\001\DialerAllinOne.dll]  [tencent, 1, 4, 0, 0]
    [D:\001\QQPet.dll]  [, 1, 0, 0, 1]
    [D:\001\QQFileTransfer.dll]  [Tencent, 0, 3, 3, 5]
    [D:\001\BQQApplication.dll]  [N/A, N/A]
    [D:\001\QQCustomFace.dll]  [N/A, N/A]
    [D:\001\CommercesMng.dll]  [, 1, 0, 0, 1]
    [D:\001\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
    [D:\001\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 271]
    [D:\001\npkcntc.dll]  [INCA Internet Co., Ltd., 2006, 6, 27, 1]
    [D:\001\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [D:\001\QQSceneMng.dll]  [N/A, N/A]
    [D:\001\ImageOle.dll]  [TODO: <Company name>, 1.0.0.1]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [D:\001\QQPhoneHelper.dll]  [腾讯科技（深圳）有限公司, 2, 1, 8, 81]
[PID: 3472][F:\tools\软件\SREng\SREng.exe]  [Smallfrogs Studio, 2.2.6.605]

==================================
文件关联
.TXT  Error. [C:\WINDOWS\notepad.exe %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  Error. ["hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
N/A

==================================

<twin><C:\WINDOWS\System32\ctfnom.exe> [Microsoft Corporation]
[Win32 Display Driver / Win32DDS]
<><N/A>
[Performance Moniter / BRGNS]
<C:\WINDOWS\SYSTEM32\RUNDLL2KXP.EXE C:\WINDOWS\SYSTEM32\WBEM\UKAWE.DLL,Export 1087><Microsoft Corporation

C:\WINDOWS\SYSTEM32\WBEM\UKAWE.DLL
以上的对应删除文件 注册表 服务
以下这个怀疑，备份删除
[C:\WINDOWS\system32\giwfe.dll

引用:

【loveperday的贴子】<twin><C:\WINDOWS\System32\ctfnom.exe> [Microsoft Corporation] [Win32 Display Driver / Win32DDS] <><N/A> [Performance Moniter / BRGNS] <C:\WINDOWS\SYSTEM32\RUNDLL2KXP.EXE C:\WINDOWS\SYSTEM32\WBEM\UKAWE.DLL,Export 1087><Microsoft Corporation C:\WINDOWS\SYSTEM32\WBEM\UKAWE.DLL 以上的对应删除文件 注册表 服务 以下这个怀疑，备份删除 [C:\WINDOWS\system32\giwfe.dll ………………

giwfe.dll这个是病毒。但是删不掉！我用强制删除都不行~！

补充:
[Office Backup Engine / ClipArt]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\System32\ngypi.dll><Microsoft Corporation>

另外QQ文件夹下的TIMPLATFORM(大约28K的,隐藏属性)删除,把TIMPLATFROM改成TIMPLATFORM(约60K)

用unlocker或者冰刃

我用的是PowerRmv.com还有XDelBox1.2.scr但是都不行！