C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\Program Files\Rising\Rav\CCenter.exe
C:\windows\System32\svchost.exe
C:\windows\system32\spoolsv.exe
C:\windows\Explorer.EXE
E:\Program Files\security suite\ewidoctrl.exe
C:\windows\System32\svchost.exe
C:\windows\system32\rundll32.exe
C:\Program Files\racer-henan-cnc\racer.exe
C:\Program Files\racer-henan-cnc\RacerKp.exe
E:\Program Files\security suite\SecuritySuite.exe
C:\Program Files\Internet Explorer\iexplore.exe
E:\Program Files\security suite\ewidoguard.exe
C:\Documents and Settings\cc\桌面\HijackThis1991zww.exe
O3 - IE工具栏增项: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - IE工具栏增项: Toolbar888 - {77FBF9B8-1D37-4FF2-9CED-192D8E3ABA6F} - C:\Program Files\Toolbar888\ToolBar888.dll (file missing)
O3 - IE工具栏增项: UCmore XP - The Search Accelerator - {44BE0690-5429-47f0-85BB-3FFD8020233E} - C:\Program Files\TheSearchAccelerator\UCMTSAIE.dll (file missing)
O4 - 启动项HKLM\\Run: [winsync] C:\windows\System32\yrcapk.exe reg_run
O4 - HKCU\..\Run: [CU1] C:\Program Files\Common Files\VCClient\VCClient.exe
O4 - HKCU\..\Run: [CU2] C:\Program Files\Common Files\VCClient\VCMain.exe
O4 - HKCU\..\Run: [qwii] C:\PROGRA~1\COMMON~1\qwii\qwiim.exe
O4 - Startup: Z_Start.lnk = C:\ZICORN001.exe
O4 - Startup: Zeno.lnk = ?
O8 - IE右键菜单中的新增项目: 雅虎搜索 - res://C:\PROGRA~1\Yahoo!\Assistant\Assist\yasbar.dll/246
O16 - DPF: {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} (AxInputControl Class) - https://mybank.icbc.com.cn/icbc/perbank/AxSafeControls.cab
O16 - DPF: {DA984A6D-508E-11D6-AA49-0050FF3C628D} (Ravonline) - http://download.rising.com.cn/ravkill/rsonline.cab
O18 - Filter: text/html - {F4C522E0-5BD5-407B-99A3-5A435DB6694A} - C:\windows\System32\v9gcyb8xi.dll
O20 - Winlogon Notify: Dynamic Directory - C:\WINDOWS\system32\r68slgl716q.dll
O23 - NT 服务: ewido security suite control - ewido networks - E:\Program Files\security suite\ewidoctrl.exe
O23 - NT 服务: ewido security suite guard - ewido networks - E:\Program Files\security suite\ewidoguard.exe
O23 - NT 服务: Network Monitor - Unknown owner - C:\Program Files\Network Monitor\netmon.exe (file missing)
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe
