[C:\Program Files\Rising\Ras\mchook.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 4]
[PID: 4840][D:\Program Files\瑞星专杀\cureit.exe] [N/A, N/A]
[C:\WINDOWS\system32\tyqumk87.dll] [, 1, 1, 1, 1002]
[C:\WINDOWS\system32\oqsfam42.dll] [, 1, 1, 1, 1002]
[C:\PROGRA~1\COMMON~1\pcsv\cpml.dll] [, 1, 0, 0, 6]
[C:\PROGRA~1\COMMON~1\pcsv\hurq.dll] [ , 1, 0, 0, 6]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 4788][C:\DOCUME~1\Owner\LOCALS~1\Temp\RarSFX0\_start.exe] [Doctor Web, Ltd., 2.53]
[C:\WINDOWS\system32\tyqumk87.dll] [, 1, 1, 1, 1002]
[C:\WINDOWS\system32\oqsfam42.dll] [, 1, 1, 1, 1002]
[C:\PROGRA~1\COMMON~1\pcsv\cpml.dll] [, 1, 0, 0, 6]
[C:\PROGRA~1\COMMON~1\pcsv\hurq.dll] [ , 1, 0, 0, 6]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 5592][C:\DOCUME~1\Owner\LOCALS~1\Temp\RarSFX0\cureit.exe] [Doctor Web, Ltd., 4, 33, 2, 10060]
[C:\WINDOWS\system32\tyqumk87.dll] [, 1, 1, 1, 1002]
[C:\WINDOWS\system32\oqsfam42.dll] [, 1, 1, 1, 1002]
[C:\PROGRA~1\COMMON~1\pcsv\cpml.dll] [, 1, 0, 0, 6]
[C:\PROGRA~1\COMMON~1\pcsv\hurq.dll] [ , 1, 0, 0, 6]
[C:\DOCUME~1\Owner\LOCALS~1\Temp\RarSFX0\dwebllio.dll] [Doctor Web Ltd., 4, 32, 0, 0]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[C:\Program Files\Rising\Ras\mchook.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 4]
[PID: 5196][C:\Program Files\Rising\Rav\RsAgent.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9]
[C:\WINDOWS\system32\tyqumk87.dll] [, 1, 1, 1, 1002]
[C:\WINDOWS\system32\oqsfam42.dll] [, 1, 1, 1, 1002]
[C:\PROGRA~1\COMMON~1\pcsv\cpml.dll] [, 1, 0, 0, 6]
[C:\PROGRA~1\COMMON~1\pcsv\hurq.dll] [ , 1, 0, 0, 6]
[C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[C:\Program Files\Rising\Ras\mchook.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 4]
[PID: 4532][C:\WINDOWS\msagent\AgentSvr.exe] [Microsoft Corporation, 2.00.0.3424]
[C:\WINDOWS\system32\tyqumk87.dll] [, 1, 1, 1, 1002]
[C:\WINDOWS\system32\oqsfam42.dll] [, 1, 1, 1, 1002]
[C:\PROGRA~1\COMMON~1\pcsv\cpml.dll] [, 1, 0, 0, 6]
[C:\PROGRA~1\COMMON~1\pcsv\hurq.dll] [ , 1, 0, 0, 6]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[C:\Program Files\Rising\Ras\mchook.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 4]
[PID: 4068][C:\Program Files\Tencent\TT\TTraveler.exe] [腾讯公司, 3.2.200.275]
[C:\WINDOWS\system32\tyqumk87.dll] [, 1, 1, 1, 1002]
[C:\WINDOWS\system32\oqsfam42.dll] [, 1, 1, 1, 1002]
[C:\PROGRA~1\COMMON~1\pcsv\cpml.dll] [, 1, 0, 0, 6]
[C:\PROGRA~1\COMMON~1\pcsv\hurq.dll] [ , 1, 0, 0, 6]
[C:\WINDOWS\system32\kakatool.dll] [Beijing Rising Technology Co., Ltd., 2, 0, 2, 6]
[C:\Program Files\Tencent\TT\Plugins\QQFloatBar\QQFloatBar4TT2.dll] [腾讯公司, 1, 1, 0, 5]
[C:\Program Files\Tencent\TT\Plugins\TWeather\TWeather.dll] [, 1, 0, 0, 3]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[C:\Program Files\Tencent\TT\PersonalDesktop.dll] [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 4]
[C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[C:\WINDOWS\system32\winumk87.dll] [, 1, 1, 1, 1002]
[C:\WINDOWS\system32\winfam42.dll] [, 1, 1, 1, 1004]
[C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0]
[C:\Program Files\Rising\Ras\mchook.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 4]
[PID: 6044][d:\Program Files\Thunder Network\Thunder\Program\Thunder5.exe] [Thunder Networking Technologies,LTD, 5, 5, 5, 269]
[C:\WINDOWS\system32\tyqumk87.dll] [, 1, 1, 1, 1002]
[C:\WINDOWS\system32\oqsfam42.dll] [, 1, 1, 1, 1002]
[C:\PROGRA~1\COMMON~1\pcsv\cpml.dll] [, 1, 0, 0, 6]
[C:\PROGRA~1\COMMON~1\pcsv\hurq.dll] [ , 1, 0, 0, 6]
[d:\Program Files\Thunder Network\Thunder\Program\TaskManager.dll] [Thunder Networking Technologies,LTD, 1, 0, 2, 14]
[d:\Program Files\Thunder Network\Thunder\Program\download_interface.dll] [Thunder Networking Technologies,LTD, 2, 12, 2, 46]
[d:\Program Files\Thunder Network\Thunder\Program\asyn_dns.dll] [Thunder Networking Technologies,LTD, 2, 12, 2, 46]
[d:\Program Files\Thunder Network\Thunder\Program\BHOStub.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 8]
[d:\Program Files\Thunder Network\Thunder\Program\FloatBar.dll] [Giganology Inc., 1, 0, 0, 2]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[d:\Program Files\Thunder Network\Thunder\Program\iTargetAD.dll] [Thunder Networking Technologies,LTD, 1, 0, 2, 15]
[C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0]
[d:\Program Files\Thunder Network\Thunder\Components\DiagnoseHelper\DiagnoseHelper.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 10]
[d:\Program Files\Thunder Network\Thunder\Components\PortVerify\PortVerify.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
[d:\Program Files\Thunder Network\Thunder\Components\ExplorerHelper\ExplorerHelper.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
[d:\Program Files\Thunder Network\Thunder\Components\DTAG\DTAG.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
[d:\Program Files\Thunder Network\Thunder\Program\LiveUpdate.dll] [, 1, 0, 1, 17]
[d:\Program Files\Thunder Network\Thunder\Components\InMedia\iEmbedShell.dll] [ , 1, 0, 0, 15]
[d:\Program Files\Thunder Network\Thunder\Components\InMedia\iEmbed08.dll] [ , 3, 2, 0, 63]
[d:\Program Files\Thunder Network\Thunder\Components\Community\XLCommunity.dll] [Thunder Networking Technologies,LTD, 1, 0, 3, 14]
[d:\Program Files\Thunder Network\Thunder\Program\RegisterDll.dll] [Thunder Networking Technologies,LTD, 2, 2, 1, 43]
[d:\Program Files\Thunder Network\Thunder\Components\Search\XLSearch.dll] [Thunder Networking Technologies,LTD, 1, 0, 2, 7]
[d:\Program Files\Thunder Network\Thunder\Components\P4PClient\P4PClient.dll] [Thunder Networking Technologies,LTD, 1, 0, 2, 13]
[d:\Program Files\Thunder Network\Thunder\Program\msgmanage.dll] [Thunder Networking Technologies,LTD, 2, 0, 1, 38]
[d:\Program Files\Thunder Network\Thunder\Components\VPSHELL\VPSHELL.dll] [, 1, 0, 0, 1]
[d:\Program Files\Thunder Network\Thunder\Components\VPSHELL\VideoPicture.dll] [XunLei, 1, 0, 0, 1]
[C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[d:\Program Files\Thunder Network\Thunder\Plugins\TingTing\TingTing.dll] [Thunder Networking Technologies,LTD, 1, 1, 1, 12]
[d:\Program Files\Thunder Network\Thunder\Plugins\BhoAdv\bho_adv.dll] [深圳市迅雷网络技术有限公司, 1.0.1.0]
[C:\Program Files\Rising\Ras\mchook.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 4]
[PID: 5060][C:\Program Files\Rising\Ras\RasTray.exe] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 28]
[C:\Program Files\Rising\Ras\sysutil.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 1]
[C:\WINDOWS\system32\tyqumk87.dll] [, 1, 1, 1, 1002]
[C:\WINDOWS\system32\oqsfam42.dll] [, 1, 1, 1, 1002]
[C:\PROGRA~1\COMMON~1\pcsv\cpml.dll] [, 1, 0, 0, 6]
[C:\PROGRA~1\COMMON~1\pcsv\hurq.dll] [ , 1, 0, 0, 6]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[C:\Program Files\Rising\Ras\rasui.dll] [Rising Corp., 1, 0, 0, 33]
[C:\Program Files\Rising\Ras\mchook.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 4]
[PID: 6084][c:\program files\rising\ras\RasProxy.exe] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[PID: 5696][C:\PROGRA~1\WINDOW~4\clean.exe] [ANetfox, 5.00]
[C:\WINDOWS\system32\tyqumk87.dll] [, 1, 1, 1, 1002]
[C:\WINDOWS\system32\oqsfam42.dll] [, 1, 1, 1, 1002]
[C:\Program Files\Rising\Ras\mchook.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 4]
[C:\PROGRA~1\COMMON~1\pcsv\cpml.dll] [, 1, 0, 0, 6]
[C:\PROGRA~1\COMMON~1\pcsv\hurq.dll] [ , 1, 0, 0, 6]
[C:\PROGRA~1\WINDOW~4\shlobj71.ocx] [Sky Software (http://www.ssware.com), 7, 1, 0, 0]
[C:\PROGRA~1\WINDOW~4\fldrvw71.ocx] [Sky Software (http://www.ssware.com), 7, 1, 0, 0]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 2788][C:\DOCUME~1\Owner\LOCALS~1\Temp\Rar$EX00.391\SREng.EXE] [Smallfrogs Studio, 2.3.13.690]
[C:\WINDOWS\system32\tyqumk87.dll] [, 1, 1, 1, 1002]
[C:\WINDOWS\system32\oqsfam42.dll] [, 1, 1, 1, 1002]
[C:\Program Files\Rising\Ras\mchook.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 4]
[C:\PROGRA~1\COMMON~1\pcsv\cpml.dll] [, 1, 0, 0, 6]
[C:\PROGRA~1\COMMON~1\pcsv\hurq.dll] [ , 1, 0, 0, 6]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1localhost
==================================
API HOOK
N/A
==================================
[/CODE]