[CODE]

2007-05-18,10:03:13

System Repair Engineer 2.3.13.690
Smallfrogs (http://www.KZTechs.com)

Windows Server 2003 Standard Edition Service Pack 1 (Build 3790)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
N/A

==================================
启动文件夹
[Microsoft Office]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Microsoft Office.lnk --> C:\PROGRA~1\MICROS~2\Office\OSA9.EXE

[Microsoft Corporation]><N>
[服务管理器]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\服务管理器.lnk --> C:\PROGRA~1\MICROS~1\80

\Tools\Binn\sqlmangr.exe [Microsoft Corporation]><N>

==================================
服务
[Application Layer Gateway Service / ALG][Running/Manual Start]
  <C:\WINDOWS\System32\alg.exe><Microsoft Corporation>
[Indexing Service / CiSvc][Stopped/Disabled]
  <C:\WINDOWS\system32\cisvc.exe><Microsoft Corporation>
[Logical Disk Manager Administrative Service / dmadmin][Stopped/Manual Start]
  <C:\WINDOWS\System32\dmadmin.exe /com><Microsoft Corporation>
[EasyMail NT Service / EasyMail][Running/Auto Start]
  <C:\EasyMail\Emsvr.exe><MaJian>
[Human Interface Device Access / HidServ][Stopped/Disabled]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[IMAPI CD-Burning COM Service / ImapiService][Stopped/Disabled]
  <C:\WINDOWS\system32\imapi.exe><Microsoft Corporation>
[Kingsoft Antivirus Net Communication / KANetCommService][Running/Auto Start]
  <C:\KavNet\KANSvr.EXE><Kingsoft Corporation>
[License Logging / LicenseService][Stopped/Disabled]
  <C:\WINDOWS\System32\llssrv.exe><Microsoft Corporation>
[NetMeeting Remote Desktop Sharing / mnmsrvc][Stopped/Disabled]
  <C:\WINDOWS\system32\mnmsrvc.exe><Microsoft Corporation>
[Microsoft Search / MSSEARCH][Running/Auto Start]
  <"C:\Program Files\Common Files\System\MSSearch\Bin\mssearch.exe"><Microsoft Corporation>
[MSSQLSERVER / MSSQLSERVER][Running/Auto Start]
  <e:\MSSQL\binn\sqlservr.exe><Microsoft Corporation>
[MSSQLServerADHelper / MSSQLServerADHelper][Stopped/Manual Start]
  <C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe><Microsoft Corporation>
[Network DDE / NetDDE][Stopped/Disabled]
  <C:\WINDOWS\system32\netdde.exe><Microsoft Corporation>
[Network DDE DSDM / NetDDEdsdm][Stopped/Disabled]
  <C:\WINDOWS\system32\netdde.exe><Microsoft Corporation>
[File Replication / NtFrs][Stopped/Manual Start]
  <C:\WINDOWS\system32\ntfrs.exe><Microsoft Corporation>
[Remote Desktop Help Session Manager / RDSessMgr][Stopped/Manual Start]
  <C:\WINDOWS\system32\sessmgr.exe><Microsoft Corporation>
[Resultant Set of Policy Provider / RSoPProv][Stopped/Manual Start]
  <C:\WINDOWS\system32\RSoPProv.exe><Microsoft Corporation>
[Smart Card / SCardSvr][Stopped/Manual Start]
  <C:\WINDOWS\System32\SCardSvr.exe><Microsoft Corporation>
[SQLSERVERAGENT / SQLSERVERAGENT][Stopped/Auto Start]
  <e:\MSSQL\binn\sqlagent.exe -i MSSQLSERVER><Microsoft Corporation>
[Performance Logs and Alerts / SysmonLog][Stopped/Manual Start]
  <C:\WINDOWS\system32\smlogsvc.exe><Microsoft Corporation>
[Telnet / TlntSvr][Stopped/Disabled]
  <C:\WINDOWS\system32\tlntsvr.exe><Microsoft Corporation>
[Terminal Services Session Directory / Tssdis][Stopped/Disabled]
  <C:\WINDOWS\System32\tssdis.exe><Microsoft Corporation>
[Windows User Mode Driver Framework / UMWdf][Stopped/Manual Start]
  <C:\WINDOWS\system32\wdfmgr.exe><Microsoft Corporation>
[Virtual Disk Service / vds][Stopped/Manual Start]
  <C:\WINDOWS\System32\vds.exe><Microsoft Corporation>
[Volume Shadow Copy / VSS][Stopped/Manual Start]
  <C:\WINDOWS\System32\vssvc.exe><Microsoft Corporation>
[WMI Performance Adapter / WmiApSrv][Stopped/Manual Start]
  <C:\WINDOWS\system32\wbem\wmiapsrv.exe><Microsoft Corporation>

==================================
驱动程序
[a320raid / a320raid][Running/Boot Start]
  <\SystemRoot\system32\drivers\a320raid.sys><Adaptec, Inc.>
[adpu320 / adpu320][Running/Boot Start]
  <\SystemRoot\system32\drivers\adpu320.sys><Adaptec, Inc.>
[ati2mtag / ati2mtag][Running/Manual Start]
  <system32\DRIVERS\ati2mtag.sys><ATI Technologies Inc.>
[Broadcom NetXtreme Gigabit Ethernet / b57w2k][Running/Manual Start]
  <system32\DRIVERS\b57xp32.sys><Broadcom Corporation>
[IP in IP Tunnel Driver / IpInIp][Stopped/Manual Start]
  <system32\DRIVERS\ipinip.sys><N/A>
[Klif / Klif][Running/System Start]
  <\??\C:\WINDOWS\system32\Drivers\klif.sys><Kaspersky Labs>
[KWatch / KWatch][Running/System Start]
  <\??\C:\WINDOWS\system32\drivers\KWatch.Sys><Kingsoft Corporation>
[ljmgobo / ljmgobo][Running/Boot Start]
  <\SystemRoot\\SystemRoot\System32\drivers\ljmgobo.sys><N/A>
[New0 / New0][Running/Auto Start]
  <\??\C:\WINDOWS\system32\new.sys><N/A>
[npkcrypt / npkcrypt][Stopped/Auto Start]
  <\??\C:\Program Files\Tencent\QQ\npkcrypt.sys><N/A>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[System Safety Monitor 2.0 Core Engine / safemon][Running/Boot Start]
  <\SystemRoot\system32\drivers\safemon.sys><System Safety Limited>
[Secdrv / Secdrv][Stopped/Manual Start]
  <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>

==================================
浏览器加载项
[QQBrowserHelperObject Class]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, N/A>
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_001.dll, N/A>
[NavigatMon Class]
  {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, >
[CnsHook Class]
  {D157330A-9EF3-49F8-9A67-4141AC41ADD4} <C:\WINDOWS\DOWNLO~1\CnsHook.dll, 北京三七二一科技有限公司>
[Yahoo 3.5G电邮]
  {507F9113-CD77-4866-BA92-0E86DA3D0B97} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail, N/A>
[名品折扣]
  {59BC54A2-56B3-44a0-93E5-432D58746E26} <http://adtaobao.allyes.com/main/adfclick?

db=adtaobao&bid=138,140,18&cid=816,8,1&sid=5042&show=ignore&url=http://www.taobao.com/vertical/mall/pro.php?allyesPara=816,

N/A>
[雅虎助手]
  {5D73EE86-05F1-49ed-B850-E423120EC338} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yassist, N/A>
[雅虎WIDGET]
  {6354ABE6-05F1-49ed-B850-E423120EC338} <http://cn.widget.yahoo.com/index.htm?source=Cns, N/A>
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <C:\Program Files\Tencent\QQ\QQ.EXE, N/A>
[QQIEFloatBarCfgCmd Class]
  {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, N/A>
[情景聊天]
  {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomsg, N/A>
[]
  {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair, N/A>
[]
  {FD00D911-7529-4084-9946-A29F1BDF4FE5} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean, N/A>
[金山毒霸在线产品升级]
  {52DF16E3-6C4F-4B22-8BAF-09263E463B48} <C:\WINDOWS\system32\kingsoft\KOS\KOSInit.ocx, 金山软件股份有限公司>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[QQBrowserHelperObject Class]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, N/A>
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_001.dll, N/A>
[NavigatMon Class]
  {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, >
[CnsHook Class]
  {D157330A-9EF3-49F8-9A67-4141AC41ADD4} <C:\WINDOWS\DOWNLO~1\CnsHook.dll, 北京三七二一科技有限公司>

==================================
正在运行的进程
[PID: 1308][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
[PID: 1404][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.2.3790.0 (srv03_rtm.030324-2048)]
[PID: 1628][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
    [C:\WINDOWS\system32\SSMWinlogonEx.dll]  [System Safety Limited, 2.0.0.562]
[PID: 1688][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
[PID: 1700][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.2.3790.0 (srv03_rtm.030324-2048)]
[PID: 1884][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
[PID: 1964][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
[PID: 192][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
[PID: 288][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
[PID: 360][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
[PID: 872][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
    [C:\WINDOWS\system32\ZLhp1020.DLL]  [Zenographics, Inc., 5, 53, 2714, 0]
    [C:\WINDOWS\system32\ZLM.dll]  [Zenographics, Inc., 5, 50, 1416, 0]
    [C:\WINDOWS\system32\spool\PRTPROCS\W32X86\IMFPrint.DLL]  [Zenographics, Inc., 5, 54, 330, 0]
    [C:\WINDOWS\system32\Imf32.dll]  [Zenographics, Inc., 5, 60, 1204, 0]
    [C:\WINDOWS\system32\ZTAG32.dll]  [Zenographics, Inc., 5, 60, 1210, 0]
    [C:\WINDOWS\system32\ZSPOOL.dll]  [Zenographics, Inc., 5, 51, 709, 0]
[PID: 904][C:\WINDOWS\system32\msdtc.exe]  [Microsoft Corporation, 2001.12.4720.1830 (srv03_sp1_rtm.050324-1447)]
[PID: 1104][C:\EasyMail\Emsvr.exe]  [MaJian, 2.0.0.1]
[PID: 1132][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
[PID: 1180][C:\WINDOWS\system32\inetsrv\inetinfo.exe]  [Microsoft Corporation, 6.0.3790.1830 (srv03_sp1_rtm.050324-1447)]
[PID: 1204][C:\KavNet\KANSvr.EXE]  [Kingsoft Corporation, 2006, 7, 10, 58]
    [C:\KavNet\dump.dll]  [Kingsoft Corporation, 2006, 2, 16, 8]
    [C:\KavNet\KANSvr.DLL]  [kingsoft, 2005, 9, 30, 7]
    [C:\KavNet\StartKSCE.DLL]  [, 2006, 1, 17, 13]
    [C:\KavNet\KSCESendMsgManage.DLL]  [Kingsoft Corporation, 2006, 2, 16, 11]
    [C:\KavNet\KSCEEssentialModules.DLL]  [, 2005, 8, 18, 5]
    [C:\KavNet\CRecvMsgManage.DLL]  [, 2006, 1, 22, 6]
    [C:\KavNet\KSCEEventSystem.DLL]  [Kingsoft Corporation, 2006, 3, 6, 7]
    [C:\KavNet\KANVirusLogLogicModule.DLL]  [Kingsoft Corporation, 2006, 12, 29, 11]
    [C:\KavNet\CKSCEStream.DLL]  [, 2006, 1, 21, 4]
    [C:\KavNet\BaseModule.DLL]  [, 2007, 4, 25, 29]
    [C:\KavNet\WatchModule.DLL]  [, 2006, 2, 8, 20]
    [C:\KavNet\KWatchFn2.DLL]  [Kingsoft Corporation, 2007, 4, 9, 97]
    [C:\KavNet\KPluginInteractive.DLL]  [Kingsoft Corp., 2005, 5, 11, 3]
    [C:\KavNet\NetCommunication.DLL]  [, 2006, 3, 16, 130]
    [C:\KavNet\KANCMain.DLL]  [Kingsoft Corporation, 2006, 11, 29, 50]
    [C:\KavNet\KANSAComm.dll]  [kingsoft, 2004, 6, 2, 10]
    [C:\KavNet\RPCRecvMsg.DLL]  [kingsoft, 2006, 5, 19, 9]
    [C:\KavNet\CKSCEDECodeMsg.DLL]  [, 2005, 3, 23, 5]
    [C:\KavNet\KAVTimer.DLL]  [N/A, N/A]
    [C:\KavNet\KANSelectIP.DLL]  [Kingsoft Corporation, 2006, 11, 2, 6]
    [C:\KavNet\KAEPlat.DLL]  [Kingsoft Corp., 2006, 8, 29, 60]
    [C:\KavNet\KAEMem.DAT]  [Kingsoft, 2006, 9, 25, 16]
    [C:\KavNet\KAEUnpack.DAT]  [Kingsoft Corp., 2007, 4, 12, 116]
    [C:\KavNet\KAVUtils.dll]  [Kingsoft Corp, 2004, 2, 12, 69]
    [C:\KavNet\KAVFilter.DLL]  [kingsoft, 2005, 4, 13, 5]
    [C:\KavNet\KANCFUN.DLL]  [kingsoft, 2006, 12, 29, 10]
[PID: 1444][C:\KavNet\KMailMon.exe]  [Kingsoft Corporation, 2007, 4, 18, 961]
    [C:\KavNet\KAntiSpm.dll]  [Kingsoft Corporation, 2007, 3, 7, 130]
    [C:\KavNet\KANCMail.dll]  [kingsoft, 2007, 4, 25, 13]
    [C:\KavNet\KSCESendMsgManage.DLL]  [Kingsoft Corporation, 2006, 2, 16, 11]
    [C:\KavNet\KSCEEssentialModules.DLL]  [, 2005, 8, 18, 5]
    [C:\KavNet\CRecvMsgManage.DLL]  [, 2006, 1, 22, 6]
    [C:\KavNet\CKSCEStream.DLL]  [, 2006, 1, 21, 4]
    [C:\KavNet\CKSCEDECodeMsg.DLL]  [, 2005, 3, 23, 5]
    [C:\KavNet\RPCRecvMsg.DLL]  [kingsoft, 2006, 5, 19, 9]
    [C:\KavNet\KAVIPC2.DLL]  [Kingsoft Corporation, 2006, 8, 18, 25]
    [C:\KavNet\KAECall2.DLL]  [Kingsoft Corporation, 2004, 12, 28, 7]
    [C:\KavNet\KAEPlat.DLL]  [Kingsoft Corp., 2006, 8, 29, 60]
    [C:\KavNet\KAEMem.DAT]  [Kingsoft, 2006, 9, 25, 16]
    [C:\KavNet\KAEUnpack.DAT]  [Kingsoft Corp., 2007, 4, 12, 116]
    [C:\KavNet\KASocket.dll]  [Kingsoft Corporation, 2006, 3, 17, 235]
[PID: 620][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
[PID: 1840][C:\Program Files\Common Files\System\MSSearch\Bin\mssearch.exe]  [Microsoft Corporation, 9.107.8320.9]
[PID: 820][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
[PID: 2440][C:\WINDOWS\system32\Rundll32.exe]  [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  [北京三七二一科技有限公司, 1, 5, 3, 0]
    [C:\KavNet\KASocket.dll]  [Kingsoft Corporation, 2006, 3, 17, 235]
    [C:\WINDOWS\DOWNLO~1\CnsMinEx.dll]  [国风因特软件(北京)有限公司, 2, 5, 0, 3]
    [C:\WINDOWS\DOWNLO~1\CnsMinIO.dll]  [北京三七二一科技有限公司, 2, 5, 0, 4]
    [C:\WINDOWS\DOWNLO~1\cnsio.dll]  [北京三七二一科技有限公司, 2, 5, 0, 3]

[PID: 2828][C:\KavNet\KANGUI.EXE]  [Kingsoft Corporation, 2007, 4, 19, 171]
    [C:\KavNet\dump.dll]  [Kingsoft Corporation, 2006, 2, 16, 8]
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  [北京三七二一科技有限公司, 1, 5, 3, 0]
    [C:\KavNet\KASocket.dll]  [Kingsoft Corporation, 2006, 3, 17, 235]
    [C:\KavNet\KSCESendMsgManage.DLL]  [Kingsoft Corporation, 2006, 2, 16, 11]
    [C:\KavNet\KSCEEssentialModules.DLL]  [, 2005, 8, 18, 5]
    [C:\KavNet\CRecvMsgManage.DLL]  [, 2006, 1, 22, 6]
    [C:\KavNet\CKSCEStream.DLL]  [, 2006, 1, 21, 4]
    [C:\KavNet\CKSCEDECodeMsg.DLL]  [, 2005, 3, 23, 5]
    [C:\KavNet\RPCRecvMsg.DLL]  [kingsoft, 2006, 5, 19, 9]
    [C:\Program Files\360safe\safemon\safemon.dll]  [, 3, 2, 0, 1001]
[PID: 2860][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  [北京三七二一科技有限公司, 1, 5, 3, 0]
    [C:\KavNet\KASocket.dll]  [Kingsoft Corporation, 2006, 3, 17, 235]
[PID: 2912][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
[PID: 2924][C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe]  [Microsoft Corporation, 2000.080.2039.00]
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  [北京三七二一科技有限公司, 1, 5, 3, 0]
    [C:\KavNet\KASocket.dll]  [Kingsoft Corporation, 2006, 3, 17, 235]
    [C:\Program Files\360safe\safemon\safemon.dll]  [, 3, 2, 0, 1001]
[PID: 3344][c:\windows\system32\inetsrv\w3wp.exe]  [Microsoft Corporation, 6.0.3790.1830 (srv03_sp1_rtm.050324-1447)]
    [c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_836507a3\mscorlib.dll]  [N/A, N/A]
    [c:\windows\assembly\gac\cscompmgd\7.0.5000.0__b03f5f7f11d50a3a\cscompmgd.dll]  [ , 7.10.3052.4]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\assembly\dl2\0e510d40

\00a85999_3f3ec701\cjcx.dll]  [ , 0.0.0.0]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\assembly\dl2\f4321ea0

\007df72e_9a21c701\classglobal.dll]  [ , 1.0.2542.23824]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\assembly\dl2\9474b066

\00429f26_9a21c701\classlibrary.dll]  [ , 1.0.2542.23817]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\assembly\dl2\8c5ca2b8

\00783d89_ca6bc501\cnblogs.dct.thin.dll]  [ , 1.0.7.5]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\assembly\dl2

\642ae74e\007f19f7_3068c601\jcyd.dll]  [ , 0.0.0.0]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\assembly\dl2

\e99c9a6c\003324cb_4417c601\qzsoftbarcode.dll]  [ , 1.0.2203.26782]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\assembly\dl2\512ca723

\0095358f_7067c701\usermanage.dll]  [ , 1.0.2631.18376]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\assembly\dl2\ecb02379

\ea0ecfa7_5f6cc701\webcxtj.dll]  [ , 1.0.2637.30424]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\assembly\dl2

\3d06e4ab\0070eb59_8d67c701\webmanage.dll]  [ , 0.0.0.0]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\assembly\dl2\0c1c56c2

\00511384_d267c701\webmanageexaminate.dll]  [ , 1.0.2631.39411]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\assembly\dl2\2a9ec161

\fed5be33_5e6cc701\webregister.dll]  [ , 1.0.2637.30112]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\assembly\dl2\4489b865

\62a91db7_5d6cc701\webshenhe.dll]  [ , 1.0.2637.30008]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\de2xrp3l.dll]  [ , 0.0.0.0]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\vd5jff3c.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\v3jefefn.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\qhyoiyc8.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\v9kcpybu.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\zitztwb9.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\qdns7ihb.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\jro1c4y4.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\rfn6h08-.dll]  [N/A, N/A]
[PID: 3372][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]

[PID: 3388][c:\windows\system32\inetsrv\w3wp.exe]  [Microsoft Corporation, 6.0.3790.1830 (srv03_sp1_rtm.050324-1447)]
    [c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_836507a3\mscorlib.dll]  [N/A, N/A]
    [c:\windows\assembly\gac\cscompmgd\7.0.5000.0__b03f5f7f11d50a3a\cscompmgd.dll]  [ , 7.10.3052.4]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\ll4kzyeu.dll]  [ , 0.0.0.0]
    [c:\windows\assembly\gac\crystaldecisions.web\9.1.5000.0__692fbea5521e1304\crystaldecisions.web.dll]  [Crystal Decisions,

Inc., 9.1.9800.0]
    [c:\windows\assembly\gac\crystaldecisions.shared\9.1.5000.0__692fbea5521e1304\crystaldecisions.shared.dll]  [Crystal

Decisions, Inc., 9.1.9800.0]
    [c:\windows\assembly\gac\crystalenterpriselib\9.1.5000.0__692fbea5521e1304\crystalenterpriselib.dll]  [ Crystal

Decisions, Inc., 9.1.9800.0]
    [c:\windows\assembly\gac\crystalreportpluginlib\9.1.5000.0__692fbea5521e1304\crystalreportpluginlib.dll]  [Crystal

Decisions, Inc., 9.1.9800.0]
    [c:\windows\assembly\gac\crystaldecisions.reportsource\9.1.5000.0__692fbea5521e1304\crystaldecisions.reportsource.dll] 

[Crystal Decisions, Inc., 9.1.9800.0]
    [c:\windows\assembly\gac\crystalinfostorelib\9.1.5000.0__692fbea5521e1304\crystalinfostorelib.dll]  [Crystal Decisions,

Inc., 9.1.9800.0]
    [c:\windows\assembly\gac\crystalpluginmgrlib\9.1.5000.0__692fbea5521e1304\crystalpluginmgrlib.dll]  [Crystal Decisions,

Inc., 9.1.9800.0]
    [c:\windows\assembly\gac\crystaldecisions.crystalreports.engine\9.1.5000.0__692fbea5521e1304

\crystaldecisions.crystalreports.engine.dll]  [Crystal Decisions, Inc., 9.1.9800.0]
    [c:\windows\assembly\gac\crystalkeycodelib\9.1.5000.0__692fbea5521e1304\crystalkeycodelib.dll]  [Crystal Decisions, Inc.,

9.1.9800.0]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\assembly\dl2\6ed13d23

\44fb77d0_196dc701\webshenhe.dll]  [ , 1.0.2636.31667]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\assembly\dl2

\af1dfbaa\f093db04_856bc701\kzrc.dll]  [ , 1.0.2636.25383]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\arwffwep.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\jjnxl23-.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\stks3tp4.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\rsgl\a872e548\2905b56b\quw00mqu.dll]  [ , 0.0.0.0]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\rsgl\a872e548\2905b56b\assembly\dl2\4cd004c9

\6e8351cd_656bc701\rsgl.dll]  [ , 1.0.2636.16612]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\rsgl\a872e548\2905b56b\7db-9j5t.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\rsgl\a872e548\2905b56b\vod0lzi4.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\rh40cwyw.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\ojlvdifa.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\1xo20gzq.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\tpxzhfcd.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\zqe6q2lb.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\xianchangzhaopin\9913323a\e7f5084b\mkudsqhx.dll] 

[N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\xianchangzhaopin\9913323a\e7f5084b\assembly\dl2

\a86751c0\f8a857d1_10d0c601\kzrc.dll]  [ , 1.0.2438.29730]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\xianchangzhaopin\9913323a\e7f5084b\dav-plnz.dll] 

[N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\vniu4rmf.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\rsgl1\a7e00f61\1c3b24cb\zk-kyg4i.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\rsgl1\a7e00f61\1c3b24cb\assembly\dl2\a8249773

\7ebe6ea2_cb78c601\rsgl.dll]  [ , 1.0.2176.26111]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\rsgl1\a7e00f61\1c3b24cb\tq8p_uiw.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\787bc637\a4b6ab5e\jipbpy7f.dll]  [ , 0.0.0.0]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\787bc637\a4b6ab5e\assembly\dl2\30398087

\6e8351cd_656bc701\rsgl.dll]  [ , 1.0.2636.16612]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\787bc637\a4b6ab5e\wvbkautt.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\787bc637\a4b6ab5e\dh4xla9o.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\787bc637\a4b6ab5e\zmjq3sim.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\w8y4oet3.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\787bc637\a4b6ab5e\qa8o3kz5.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\787bc637\a4b6ab5e\gt--kz3b.dll]  [ , 0.0.0.0]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\787bc637\a4b6ab5e\0bpals1t.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\787bc637\a4b6ab5e\alqbix_i.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\787bc637\a4b6ab5e\qia_pxn5.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\lx3ilkac.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\lry8yp80.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\2urztmdg.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\o_rbpcfk.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\2zbzktgc.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\wnawxfsm.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\-2vxrcva.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\rsgl1\a7e00f61\1c3b24cb\18v1udjn.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\rsgl1\a7e00f61\1c3b24cb\qjmojjnd.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\rsgl1\a7e00f61\1c3b24cb\tkn0voja.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\n8btekuf.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\dsjksibm.dll]  [N/A, N/A]
    [c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\v1iroywc.dll]  [N/A, N/A]
[PID: 2916][C:\WINDOWS\system32\wbem\wmiprvse.exe]  [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
[PID: 2564][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
[PID: 1668][C:\WINDOWS\explorer.exe]  [Microsoft Corporation, 6.00.3790.1830 (srv03_sp1_rtm.050324-1447)]
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  [北京三七二一科技有限公司, 1, 5, 3, 0]
    [C:\KavNet\KASocket.dll]  [Kingsoft Corporation, 2006, 3, 17, 235]
    [C:\WINDOWS\DOWNLO~1\CnsHook.dll]  [北京三七二一科技有限公司, 1, 0, 2, 7]
    [C:\PROGRA~1\3721\autolive.dll]  [, 2, 5, 3, 1007]
    [C:\PROGRA~1\3721\alLiveEx.dll]  [ , 1, 0, 3, 1006]
    [C:\PROGRA~1\3721\alrex.dll]  [, 2.5.0.1002]
    [C:\WINDOWS\DOWNLO~1\CnsMinIO.dll]  [北京三七二一科技有限公司, 2, 5, 0, 4]
    [C:\WINDOWS\DOWNLO~1\cnsio.dll]  [北京三七二一科技有限公司, 2, 5, 0, 3]
    [C:\Program Files\360safe\safemon\safemon.dll]  [, 3, 2, 0, 1001]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, N/A]
    [C:\Program Files\Common Files\KAV Shared Files\AvpShlEx.dll]  [Kaspersky Labs., 4.0.1.35]
[PID: 368][C:\Program Files\360safe\safemon\360Tray.exe]  [奇虎网, 3, 3, 0, 1004]
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  [北京三七二一科技有限公司, 1, 5, 3, 0]
    [C:\KavNet\KASocket.dll]  [Kingsoft Corporation, 2006, 3, 17, 235]
    [C:\Program Files\360safe\safemon\safemon.dll]  [, 3, 2, 0, 1001]
    [C:\Program Files\360safe\safemon\SafeKrnl.dll]  [奇虎网, 3, 2, 0, 1001]
    [C:\Program Files\360safe\AntiAdwa.dll]  [360Safe.com, 3, 3, 0, 1004]
    [C:\Program Files\360safe\live.dll]  [360safe.COM, 1, 0, 0, 1012]

太多,无法分析,直接远程开启,我来帮你弄!