[C:\PROGRA~1\ChinaNet\CLIENT~1.DLL] [, 2004, 2, 28, 1]
[C:\PROGRA~1\ChinaNet\PLUGIN~1.OCX] [, 2006, 6, 2, 14]
[C:\PROGRA~1\ChinaNet\sign.dll] [0, 2004, 12, 1, 1]
[C:\PROGRA~1\ChinaNet\ADVERT~1.OCX] [, 2005, 10, 13, 1]
[C:\PROGRA~1\ChinaNet\Gif89a.dll] [, 2005, 6, 21, 1]
[C:\PROGRA~1\ChinaNet\VnetBs.ocx] [, 2004, 11, 18, 1]
[C:\PROGRA~1\ChinaNet\VnetSkin.ocx] [GDDC, 2005, 12, 21, 1]
[C:\PROGRA~1\ChinaNet\DialogStyle.dll] [, 1, 0, 0, 1]
[C:\PROGRA~1\ChinaNet\BDSearch.ocx] [gdcn, 2005, 12, 22, 1]
[C:\PROGRA~1\ChinaNet\PageFram.ocx] [Workgroup, 2006, 6, 23, 17]
[C:\PROGRA~1\ChinaNet\AccPage.ocx] [, 1, 0, 0, 1]
[C:\PROGRA~1\ChinaNet\AccountMgr.dll] [, 2006, 6, 20, 16]
[C:\PROGRA~1\ChinaNet\Timer.ocx] [, 2006, 7, 21, 9]
[C:\PROGRA~1\ChinaNet\PLUGIN~2.OCX] [, 2006, 4, 4, 1]
[C:\PROGRA~1\ChinaNet\NEWMES~1.DLL] [, 2006, 7, 4, 16]
[C:\PROGRA~1\ChinaNet\PassCtrl.dll] [GDCN, 2006, 3, 1, 16]
[C:\WINDOWS\System32\wpcap.dll] [Politecnico di Torino, 3, 0, 0, 18]
[C:\WINDOWS\System32\pthreadVC.dll] [N/A, N/A]
[C:\WINDOWS\System32\packet.dll] [Politecnico di Torino, 3, 0, 0, 18]
[C:\PROGRA~1\ChinaNet\PlugPush.dll] [, 2004, 12, 21, 1]
[C:\PROGRA~1\ChinaNet\ALLINT~1.DLL] [, 2006, 7, 19, 14]
[C:\PROGRA~1\ChinaNet\VNETLO~1.OCX] [, 2005, 10, 9, 1]
[C:\PROGRA~1\ChinaNet\StatNum.dll] [, 2006, 3, 1, 1]
[C:\PROGRA~1\ChinaNet\VNETON~1.OCX] [, 2005, 3, 2, 1]
[C:\PROGRA~1\ChinaNet\ALLFUN~1.DLL] [GDCN, 2006, 7, 20, 9]
[C:\PROGRA~1\ChinaNet\VnetOptLog.dll] [ , 2006, 5, 10, 14]
[C:\PROGRA~1\ChinaNet\Favorite.ocx] [, 1, 0, 0, 1]
[C:\PROGRA~1\ChinaNet\DlgSkin.ocx] [, 2005, 11, 14, 1]
[C:\Program Files\金山毒霸2005\KAScript.DLL] [Kingsoft Corporation, 2004, 12, 28, 45]
[C:\Program Files\金山毒霸2005\KAEPlat.DLL] [Kingsoft Corp., 2004, 11, 26, 53]
[C:\Program Files\金山毒霸2005\KAEMem.DAT] [Kingsoft, 2004, 11, 9, 11]
[C:\WINDOWS\System32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,16,0]
[PID: 3124][C:\WINDOWS\System32\Rundll32.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\PROGRA~1\pcast\hbcast.dll] [Shanghai Henbang Technology Co., Ltd, 1, 1, 3, 8]
[C:\Program Files\金山毒霸2005\KASocket.dll] [Kingsoft Corporation, 2004, 12, 28, 232]
[C:\WINDOWS\System32\SYNCOR11.DLL] [SoundMAX, 1.2.3]
[C:\Program Files\金山毒霸2005\KAEPlat.DLL] [Kingsoft Corp., 2004, 11, 26, 53]
[C:\Program Files\金山毒霸2005\KAEMem.DAT] [Kingsoft, 2004, 11, 9, 11]
[PID: 3584][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920)]
[C:\Program Files\金山毒霸2005\KASocket.dll] [Kingsoft Corporation, 2004, 12, 28, 232]
[C:\PROGRA~1\pcast\hbcast.dll] [Shanghai Henbang Technology Co., Ltd, 1, 1, 3, 8]
[c:\PROGRA~1\chinanet\VNETTR~1.DLL] [, 2005, 4, 6, 1]
[c:\PROGRA~1\chinanet\Communicate.dll] [GDCN, 2006, 2, 15, 1]
[C:\WINDOWS\System32\SYNCOR11.DLL] [SoundMAX, 1.2.3]
[C:\PROGRA~1\ChinaNet\CLIENT~1.DLL] [, 2004, 2, 28, 1]
[D:\Program Files\Tencent\QQ\QQIEHelper.dll] [深圳市腾讯计算机系统有限公司, 1, 1, 0, 5]
[C:\WINDOWS\system32\aspaerdev.dll] [N/A, N/A]
[C:\Program Files\金山毒霸2005\KAScript.DLL] [Kingsoft Corporation, 2004, 12, 28, 45]
[C:\Program Files\金山毒霸2005\KAEPlat.DLL] [Kingsoft Corp., 2004, 11, 26, 53]
[C:\Program Files\金山毒霸2005\KAEMem.DAT] [Kingsoft, 2004, 11, 9, 11]
[C:\WINDOWS\system32\Inte32.dll] [N/A, N/A]
[C:\WINDOWS\System32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,16,0]
[PID: 2180][C:\WINDOWS\system\realsched.exe] [N/A, N/A]
[C:\Program Files\金山毒霸2005\KASocket.dll] [Kingsoft Corporation, 2004, 12, 28, 232]
[C:\WINDOWS\system\vp_VM.dll] [N/A, N/A]
[C:\WINDOWS\System32\SYNCOR11.DLL] [SoundMAX, 1.2.3]
[PID: 2740][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920)]
[C:\Program Files\金山毒霸2005\KASocket.dll] [Kingsoft Corporation, 2004, 12, 28, 232]
[C:\PROGRA~1\pcast\hbcast.dll] [Shanghai Henbang Technology Co., Ltd, 1, 1, 3, 8]
[c:\PROGRA~1\chinanet\VNETTR~1.DLL] [, 2005, 4, 6, 1]
[c:\PROGRA~1\chinanet\Communicate.dll] [GDCN, 2006, 2, 15, 1]
[C:\WINDOWS\System32\SYNCOR11.DLL] [SoundMAX, 1.2.3]
[C:\PROGRA~1\ChinaNet\CLIENT~1.DLL] [, 2004, 2, 28, 1]
[D:\Program Files\Tencent\QQ\QQIEHelper.dll] [深圳市腾讯计算机系统有限公司, 1, 1, 0, 5]
[C:\WINDOWS\system32\aspaerdev.dll] [N/A, N/A]
[C:\WINDOWS\system32\Inte32.dll] [N/A, N/A]
[C:\Program Files\金山毒霸2005\KAScript.DLL] [Kingsoft Corporation, 2004, 12, 28, 45]
[C:\Program Files\金山毒霸2005\KAEPlat.DLL] [Kingsoft Corp., 2004, 11, 26, 53]
[C:\Program Files\金山毒霸2005\KAEMem.DAT] [Kingsoft, 2004, 11, 9, 11]
[PID: 1000][C:\DOCUME~1\谭鑫\LOCALS~1\Temp\Rar$EX00.735\SREng\SREng.exe] [Smallfrogs Studio, 2.2.6.605]
[C:\Program Files\金山毒霸2005\KASocket.dll] [Kingsoft Corporation, 2004, 12, 28, 232]
[C:\WINDOWS\System32\SYNCOR11.DLL] [SoundMAX, 1.2.3]
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1 localhost
59.34.148.98 www.hao123.com
59.34.148.98 www.4199.com
59.34.148.98 www.9505.com
59.34.148.98 www.7322.com
218.5.76.175 www.huoche.com.cn
==================================