[C:\WINDOWS\System32\wdmaud.drv] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148)]
[C:\WINDOWS\System32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[d:\Thunder Network\Thunder\Components\DiagnoseHelper\DiagnoseHelper.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 10]
[d:\Thunder Network\Thunder\Components\PortVerify\PortVerify.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
[d:\Thunder Network\Thunder\Components\ExplorerHelper\ExplorerHelper.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
[d:\Thunder Network\Thunder\Components\DTAG\DTAG.dll] [Thunder Networking Technologies,LTD, 1, 1, 0, 2]
[d:\Thunder Network\Thunder\Components\DTAG\ExtractMediaTag.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
[d:\Thunder Network\Thunder\Program\LiveUpdate.dll] [, 1, 0, 1, 17]
[d:\Thunder Network\Thunder\Components\InMedia\iEmbedShell.dll] [ , 1, 0, 0, 15]
[d:\Thunder Network\Thunder\Components\InMedia\iEmbed08.dll] [ , 3, 2, 0, 63]
[d:\Thunder Network\Thunder\Components\Community\XLCommunity.dll] [Thunder Networking Technologies,LTD, 1, 0, 4, 15]
[d:\Thunder Network\Thunder\Program\RegisterDll.dll] [Thunder Networking Technologies,LTD, 2, 2, 1, 43]
[d:\Thunder Network\Thunder\Components\Search\XLSearch.dll] [Thunder Networking Technologies,LTD, 1, 0, 2, 7]
[d:\Thunder Network\Thunder\Components\P4PClient\P4PClient.dll] [Thunder Networking Technologies,LTD, 1, 0, 2, 14]
[d:\Thunder Network\Thunder\Components\VPSHELL\VPSHELL.dll] [, 1, 1, 0, 4]
[d:\Thunder Network\Thunder\Components\VPSHELL\VideoPicture.dll] [XunLei, 1, 1, 0, 4]
[d:\Thunder Network\Thunder\Components\Tips\TipsClient.dll] [Thunder Networking Technologies,LTD, 2, 1, 1, 50]
[D:\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scrchpg.dll] [Kaspersky Lab, 6.0.2.621]
[D:\Kaspersky Lab\Kaspersky Anti-Virus 6.0\klscav.dll] [Kaspersky Lab, 6.0.2.621]
[D:\Kaspersky Lab\Kaspersky Anti-Virus 6.0\MSVCR80.dll] [Microsoft Corporation, 8.00.50727.42]
[D:\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prremote.dll] [Kaspersky Lab, 6.0.2.621]
[D:\Kaspersky Lab\Kaspersky Anti-Virus 6.0\MSVCP80.dll] [Microsoft Corporation, 8.00.50727.42]
[D:\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prloader.dll] [Kaspersky Lab, 6.0.2.621]
[D:\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prkernel.ppl] [Kaspersky Lab, 6.0.2.621]
[d:\kaspersky lab\kaspersky anti-virus 6.0\params.ppl] [Kaspersky Lab, 6.0.2.621]
[d:\kaspersky lab\kaspersky anti-virus 6.0\pxstub.ppl] [Kaspersky Lab, 6.0.2.621]
[d:\kaspersky lab\kaspersky anti-virus 6.0\tempfile.ppl] [Kaspersky Lab, 6.0.2.621]
[d:\Thunder Network\Thunder\Plugins\BhoAdv\bho_adv.dll] [深圳市迅雷网络技术有限公司, 1.0.1.0]
[d:\Thunder Network\Thunder\Plugins\ThunderKAV\ThunderKAV.dll] [深圳市迅雷网络技术有限公司, 1.0.1.17]
[d:\Thunder Network\Thunder\Program\XLNet.Dll] [Xunlei, 1, 1, 0, 6]
[d:\Thunder Network\Thunder\Plugins\ThunderKAV\bin\ikave.dll] [, 5, 0, 0, 62]
[d:\Thunder Network\Thunder\Plugins\ThunderKAV\bin\kave.dll] [Kaspersky Lab., 5, 0, 0, 62]
[PID: 3096][d:\Thunder Network\Thunder\Plugins\ThunderKAV\bin\ScanningProcess.exe] [N/A, ]
[d:\Thunder Network\Thunder\Plugins\ThunderKAV\bin\prloader.dll] [Kaspersky Lab, 6.0.1.305]
[d:\Thunder Network\Thunder\Plugins\ThunderKAV\bin\prkernel.ppl] [Kaspersky Lab, 6.0.1.305]
[d:\thunder network\thunder\plugins\thunderkav\bin\prefetch.ppl] [Kaspersky Labs, 1, 0, 0, 56]
[d:\thunder network\thunder\plugins\thunderkav\bin\avpmgr.ppl] [Kaspersky Lab, 6.0.1.305]
[d:\thunder network\thunder\plugins\thunderkav\bin\wdiskio.ppl] [Kaspersky Lab, 6.0.0.276]
[d:\thunder network\thunder\plugins\thunderkav\bin\nfio.ppl] [Kaspersky Lab, 6.0.0.276]
[d:\thunder network\thunder\plugins\thunderkav\bin\avlib.ppl] [Kaspersky Lab, 6.0.0.276]
[d:\thunder network\thunder\plugins\thunderkav\bin\dtreg.ppl] [Kaspersky Lab, 6.0.0.276]
[d:\thunder network\thunder\plugins\thunderkav\bin\prutil.ppl] [Kaspersky Lab, 6.0.0.276]
[d:\thunder network\thunder\plugins\thunderkav\bin\avp1.ppl] [Kaspersky Lab, 6.0.0.299]
[d:\thunder network\thunder\plugins\thunderkav\bin\l_llio.ppl] [Kaspersky Labs, 6.0.9.75]
[d:\thunder network\thunder\plugins\thunderkav\bin\ichstrms.ppl] [Kaspersky Lab, 6.0.0.276]
[d:\thunder network\thunder\plugins\thunderkav\bin\hashcont.ppl] [Kaspersky Lab, 6.0.0.276]
[d:\thunder network\thunder\plugins\thunderkav\bin\hccmp.ppl] [Kaspersky Lab, 6.0.0.276]
[d:\thunder network\thunder\plugins\thunderkav\bin\uniarc.ppl] [Kaspersky Lab, 6.0.0.16]
[d:\thunder network\thunder\plugins\thunderkav\bin\minizip.ppl] [Kaspersky Lab, 6.0.0.16]
[d:\thunder network\thunder\plugins\thunderkav\bin\prseqio.ppl] [Kaspersky Lab, 6.0.0.276]
[d:\thunder network\thunder\plugins\thunderkav\bin\hashmd5.ppl] [Kaspersky Lab, 6.0.0.276]
[d:\thunder network\thunder\plugins\thunderkav\bin\inflate.ppl] [Kaspersky Lab, 6.0.0.16]
[d:\thunder network\thunder\plugins\thunderkav\bin\tempfile.ppl] [Kaspersky Lab, 6.0.0.276]
[d:\thunder network\thunder\plugins\thunderkav\bin\cab.ppl] [Kaspersky Lab, 6.0.0.16]
[d:\thunder network\thunder\plugins\thunderkav\bin\arj.ppl] [Kaspersky Lab, 6.0.0.16]
[d:\thunder network\thunder\plugins\thunderkav\bin\rar.ppl] [Kaspersky Lab, 6.0.0.276]
[d:\thunder network\thunder\plugins\thunderkav\bin\mdb.ppl] [Kaspersky Lab, 6.0.0.300]
[C:\WINDOWS\System32\MAPI32.dll] [Microsoft Corporation, 1.0.2536.0 (XPClient.010817-1148)]
[d:\thunder network\thunder\plugins\thunderkav\bin\msoe.ppl] [Kaspersky Lab, 6.0.0.276]
[d:\thunder network\thunder\plugins\thunderkav\bin\iwgen.ppl] [Kaspersky Lab, 6.0.0.276]
[PID: 2312][C:\DOCUME~1\sasa\LOCALS~1\Temp\Rar$EX01.061\SREng.EXE] [Smallfrogs Studio, 2.4.12.806]
==================================
文件关联
.TXT Error. [NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1 localhost
==================================
API HOOK
RVA 错误: LoadLibraryA (危险等级: 一般, 被下面模块所HOOK: Dest Addr: 0xF320BAF0)
RVA 错误: LoadLibraryExA (危险等级: 一般, 被下面模块所HOOK: Dest Addr: 0xF320BCD0)
RVA 错误: LoadLibraryExW (危险等级: 一般, 被下面模块所HOOK: Dest Addr: 0xF320BE30)
RVA 错误: LoadLibraryW (危险等级: 一般, 被下面模块所HOOK: Dest Addr: 0xF320BBE0)
RVA 错误: GetProcAddress (危险等级: 高, 被下面模块所HOOK: Dest Addr: 0xF320BDE0)
==================================
隐藏进程
N/A
==================================
[/CODE]