正在运行的进程
[PID: 412][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 468][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 492][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\system32\NVDESK32.DLL] [NVIDIA Corporation, 5.13.01.1520]
[C:\WINDOWS\MyNotification.dll] [, 1, 0, 0, 1]
[C:\WINDOWS\tgekb.dll] [N/A, N/A]
[C:\WINDOWS\UsbPnp.dll] [N/A, N/A]
[PID: 536][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\system32\NVDESK32.DLL] [NVIDIA Corporation, 5.13.01.1520]
[PID: 548][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\system32\NVDESK32.DLL] [NVIDIA Corporation, 5.13.01.1520]
[PID: 712][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\system32\NVDESK32.DLL] [NVIDIA Corporation, 5.13.01.1520]
[PID: 764][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\System32\NVDESK32.DLL] [NVIDIA Corporation, 5.13.01.1520]
[PID: 864][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\System32\NVDESK32.DLL] [NVIDIA Corporation, 5.13.01.1520]
[PID: 880][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\System32\NVDESK32.DLL] [NVIDIA Corporation, 5.13.01.1520]
[PID: 996][C:\KAV2007\KWatch.EXE] [Kingsoft Corporation, 2007, 1, 31, 81]
[C:\WINDOWS\system32\NVDESK32.DLL] [NVIDIA Corporation, 5.13.01.1520]
[C:\KAV2007\KAVIPC2.DLL] [Kingsoft Corporation, 2007, 1, 15, 30]
[C:\KAV2007\KAEPlat.DLL] [Kingsoft Corp., 2007, 2, 4, 61]
[C:\KAV2007\KAEMem.DAT] [Kingsoft, 2006, 9, 25, 16]
[C:\KAV2007\KAEUnpack.DAT] [Kingsoft Corp., 2007, 1, 16, 104]
[C:\KAV2007\KAVQuara.DLL] [Kingsoft Corporation, 2007, 1, 25, 1]
[PID: 1100][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148)]
[C:\WINDOWS\system32\NVDESK32.DLL] [NVIDIA Corporation, 5.13.01.1520]
[PID: 1336][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148)]
[C:\WINDOWS\System32\NVDESK32.DLL] [NVIDIA Corporation, 5.13.01.1520]
[C:\KAV2007\KASocket.dll] [Kingsoft Corporation, 2006, 12, 21, 241]
[C:\KAV2007\KMailOEBand.dll] [Kingsoft Corporation, 2006, 12, 1, 139]
[PID: 1428][C:\WINDOWS\soundman.exe] [Avance Logic, Inc., 4.1]
[C:\WINDOWS\System32\NVDESK32.DLL] [NVIDIA Corporation, 5.13.01.1520]
[C:\KAV2007\KASocket.dll] [Kingsoft Corporation, 2006, 12, 21, 241]
[PID: 1436][C:\Program Files\联想\联想键盘驱动\hidSevice.exe] [N/A, N/A]
[C:\Program Files\联想\联想键盘驱动\VolumeOsd.dll] [N/A, N/A]
[C:\Program Files\联想\联想键盘驱动\ScrOSD32.dll] [N/A, N/A]
[C:\WINDOWS\System32\NVDESK32.DLL] [NVIDIA Corporation, 5.13.01.1520]
[C:\KAV2007\KASocket.dll] [Kingsoft Corporation, 2006, 12, 21, 241]
[C:\KAV2007\KMailOEBand.dll] [Kingsoft Corporation, 2006, 12, 1, 139]
[PID: 1444][C:\Program Files\联想\联想键盘驱动\usbkbdriver.exe] [N/A, N/A]
[C:\WINDOWS\System32\NVDESK32.DLL] [NVIDIA Corporation, 5.13.01.1520]
[C:\Program Files\联想\联想键盘驱动\TryKey.dll] [N/A, N/A]
[C:\KAV2007\KASocket.dll] [Kingsoft Corporation, 2006, 12, 21, 241]
[PID: 1452][C:\FWRITE\Fahid.exe] [N/A, N/A]
[C:\WINDOWS\System32\NVDESK32.DLL] [NVIDIA Corporation, 5.13.01.1520]
[C:\KAV2007\KASocket.dll] [Kingsoft Corporation, 2006, 12, 21, 241]
[PID: 1460][C:\KAV2007\KAVStart.exe] [Kingsoft Corporation, 2007, 2, 1, 257]
[C:\WINDOWS\System32\NVDESK32.DLL] [NVIDIA Corporation, 5.13.01.1520]
[C:\KAV2007\KAVIPC2.DLL] [Kingsoft Corporation, 2007, 1, 15, 30]
[C:\KAV2007\SvcTimer.DLL] [Kingsoft Corporation, 2006.12.22.84]
[C:\KAV2007\KAVPassp.dll] [Kingsoft Corporation, 2006, 12, 30, 271]
[C:\KAV2007\PopSprt3.dll] [Kingsoft Corporation, 2007, 1, 16, 45]
[C:\KAV2007\KASocket.dll] [Kingsoft Corporation, 2006, 12, 21, 241]
[C:\KAV2007\KMailOEBand.dll] [Kingsoft Corporation, 2006, 12, 1, 139]
[PID: 1468][C:\WINDOWS\System32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\System32\NVDESK32.DLL] [NVIDIA Corporation, 5.13.01.1520]
[C:\KAV2007\KASocket.dll] [Kingsoft Corporation, 2006, 12, 21, 241]
[PID: 1500][C:\KAV2007\KPFW32.EXE] [Kingsoft Corporation, 2007, 2, 2, 687]
[C:\WINDOWS\System32\NVDESK32.DLL] [NVIDIA Corporation, 5.13.01.1520]
[C:\KAV2007\KAVIPC2.DLL] [Kingsoft Corporation, 2007, 1, 15, 30]
[C:\KAV2007\KAConfig.DLL] [Kingsoft Corporation, 2007, 1, 11, 41]
[C:\KAV2007\FiltList.dll] [N/A, N/A]
[C:\KAV2007\KAVPassp.DLL] [Kingsoft Corporation, 2006, 12, 30, 271]
[C:\KAV2007\KASocket.dll] [Kingsoft Corporation, 2006, 12, 21, 241]
[C:\KAV2007\KMailOEBand.dll] [Kingsoft Corporation, 2006, 12, 1, 139]
[C:\KAV2007\KAScript.DLL] [Kingsoft Corporation, 2006, 12, 11, 72]
[PID: 1572][C:\Program Files\联想\联想键盘驱动\fastkey.exe] [, 1, 0, 0, 1]
[C:\Program Files\联想\联想键盘驱动\SKOSD.DLL] [Silitek Corp., 1, 0, 6, 0]
[C:\Program Files\联想\联想键盘驱动\SKUtil.DLL] [Silitek Corp., 1, 0, 9, 0]
[C:\Program Files\联想\联想键盘驱动\kbled.dll] [N/A, N/A]
[C:\WINDOWS\System32\NVDESK32.DLL] [NVIDIA Corporation, 5.13.01.1520]
[C:\KAV2007\KASocket.dll] [Kingsoft Corporation, 2006, 12, 21, 241]
[C:\KAV2007\KMailOEBand.dll] [Kingsoft Corporation, 2006, 12, 1, 139]
[PID: 140][C:\KAV2007\KMailMon.EXE] [Kingsoft Corporation, 2006, 12, 27, 942]
[C:\WINDOWS\System32\NVDESK32.DLL] [NVIDIA Corporation, 5.13.01.1520]
[C:\KAV2007\KAntiSpm.dll] [Kingsoft Corporation, 2006, 8, 19, 104]
[C:\KAV2007\KAVIPC2.DLL] [Kingsoft Corporation, 2007, 1, 15, 30]
[C:\KAV2007\KAECall2.DLL] [Kingsoft Corporation, 2004, 12, 28, 7]
[C:\KAV2007\KAEPlat.DLL] [Kingsoft Corp., 2007, 2, 4, 61]
[C:\KAV2007\KAEMem.DAT] [Kingsoft, 2006, 9, 25, 16]
[C:\KAV2007\KAEUnpack.DAT] [Kingsoft Corp., 2007, 1, 16, 104]
[C:\KAV2007\KAConfig.DLL] [Kingsoft Corporation, 2007, 1, 11, 41]
[C:\KAV2007\KASocket.dll] [Kingsoft Corporation, 2006, 12, 21, 241]
[C:\KAV2007\KMailOEBand.dll] [Kingsoft Corporation, 2006, 12, 1, 139]
[PID: 1076][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\System32\NVDESK32.DLL] [NVIDIA Corporation, 5.13.01.1520]
[PID: 1416][C:\KAV2007\KPfwSvc.EXE] [Kingsoft Corporation, 2007, 2, 2, 31]
[C:\WINDOWS\system32\NVDESK32.DLL] [NVIDIA Corporation, 5.13.01.1520]
[PID: 1528][C:\WINDOWS\System32\nvsvc32.exe] [NVIDIA Corporation, 5.13.01.1520]
[C:\WINDOWS\System32\NVDESK32.DLL] [NVIDIA Corporation, 5.13.01.1520]
[PID: 1556][C:\Program Files\联想\联想键盘驱动\TGESrvLogon.exe] [, 1, 0, 0, 1]
[C:\WINDOWS\system32\NVDESK32.DLL] [NVIDIA Corporation, 5.13.01.1520]
[PID: 1596][C:\WINDOWS\System32\wdfmgr.exe] [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
[C:\WINDOWS\System32\NVDESK32.DLL] [NVIDIA Corporation, 5.13.01.1520]
[PID: 3996][D:\SREng.EXE] [Smallfrogs Studio, 2.3.13.690]
[C:\WINDOWS\System32\NVDESK32.DLL] [NVIDIA Corporation, 5.13.01.1520]
[C:\KAV2007\KMailOEBand.dll] [Kingsoft Corporation, 2006, 12, 1, 139]
[C:\KAV2007\KASocket.dll] [Kingsoft Corporation, 2006, 12, 21, 241]
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM Error. ["hh.exe" %1]
.HLP Error. [winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1 localhost
==================================
API HOOK
警告!System Repair Engineer 提醒
你下面的函数内容与预期值不符,他
们可能被一些恶意的软件所修改:
入口点错误:LoadLibraryExW
==================================
[/CODE]