[CODE]

2007-04-18,17:30:11

System Repair Engineer 2.4.12.806
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Publisher]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <SoundMan><SOUNDMAN.EXE>  [(Verified)Microsoft Windows Publisher]
    <TaxKeyManager><C:\Program Files\95599 Certificate Tools\SHANGHAI TAX\TaxKeyManager.exe>  []
    <CertificateRegistration><SafeSignCertReg.exe>  [A.E.T. Europe B.V.]
    <在 DESIGN02 上自动 在 Rich 上自动 EPSON Stylus Photo R230 Series><C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIP.EXE /P64 "在 DESIGN02 上自动 在 Rich 上自动 EPSON Stylus Photo R230 Series" /O23 "\\DESIGN02\在Rich上自动" /M "Stylus Photo R230">  [N/A]
    <CdnCtr><C:\Program Files\CNNIC\Cdn\cdnup.exe>  []
    <在 前台 上自动 EPSON Stylus Photo R230 Series><C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIP.EXE /P45 "在 前台 上自动 EPSON Stylus Photo R230 Series" /O15 "\\前台\EPSONSty" /M "Stylus Photo R230">  [N/A]
    <在 行政 上自动 EPSON Stylus Photo R230 Series><C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIP.EXE /P45 "在 行政 上自动 EPSON Stylus Photo R230 Series" /O15 "\\行政\EPSONSty" /M "Stylus Photo R230">  [N/A]
    <ep2k_certd><C:\Program Files\ngsrv\ep2k_certd.exe -r>  []
    <caprica><"C:\Program Files\Caprica\spoolsx.exe">  [(Verified)Beijing Sigland Communication Equipment Co. Ltd]
    <spoolsv32><C:\WINDOWS\system32\spoolsv32\spoolsv32.exe -printer>  []
    <stup.exe><C:\PROGRA~1\TENCENT\Adplus\stup.exe>  [Tencent]
    <yok.exe><C:\Program Files\yok\yok.exe>  [YOK.Com]
    <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system>  [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe asp.exe>  []
    <Userinit><C:\WINDOWS\system32\Userinit.exe,>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll>  [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    <WebSecurity><C:\WINDOWS\system32\PvSec.dll>  [N/A]
    <esww><C:\PROGRA~1\dyvv\esww.dll>  []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptimg]
    <WinlogonNotify: cryptimg><cryptig.dll>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
    <{78BF3960-61F0-4F4E-825D-3554FA61E847}><C:\WINDOWS\system32\wmpknl.dll>  [N/A]
    <{B63BFF8C-2E25-4CCC-9A01-68807F567AA7}><C:\WINDOWS\system32\WsReource.dll>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    <dfsf><; RUNDLL32.EXE C:\WINDOWS\system\Mvvp.dll,DImmcv>  []
    <ISUSPM Startup><; C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup>  [InstallShield Software Corporation]
    <KernelFaultCheck><; %systemroot%\system32\dumprep 0 -k>  [N/A]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    <QQDownload><; "C:\Program Files\Tencent\QQDownload\QQDownload.exe" autostart>  [N/A]
    <QQOnlineUpdate><; C:\Program Files\Tencent\QQ\QQUpdate.exe>  [腾讯公司]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    <sdafdsafds><; D;]XJOEPXT]ufnq]te263/fyf>  [N/A]
    <System><; C:\Program Files\Common Files\System\Updaterun.exe>  []
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    <UUpdate><; C:\Program Files\UUSee\UUpdate.exe>  []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    <vptray><; C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe>  [N/A]
    <yok.exe><; C:\Program Files\yok\yok.exe>  [YOK.Com]

==================================
启动文件夹
[腾讯QQ]
  <C:\Documents and Settings\user\「开始」菜单\程序\启动\腾讯QQ.lnk --> F:\PROGRA~1\Tencent\qq\QQ.exe [TENCENT]><N>

==================================
服务
[Std dyyy Service / dyyy][Running/Auto Start]
  <C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\COMMON~1\yatt\iddd.dll,Service -s><Microsoft Corporation>
[fhesnzd / fhesnzd][Running/Auto Start]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\PROGRA~1\COMMON~1\lhestzd\lhestzd.dll>< >
[Gentad / Gentad][Running/Auto Start]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\Struts.dll><>
[Human Interface Device Access / HidServ][Stopped/Disabled]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[IEAgent service / IEAgent][Stopped/Auto Start]
  <"C:\WINDOWS\system32\ieagent.exe"><>
[Vsn mhhh Service / mhhh][Running/Auto Start]
  <C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\snnn\suuu.dll,Service><Microsoft Corporation>
[Routing Protect Access / MouTALS][Stopped/Auto Start]
  <C:\WINDOWS\SYSTEM32\RUNDLL32.EXE C:\WINDOWS\SYSTEM32\WBEM\SMTPCONFS.DLL,Export 1087><N/A>
[Navoct / Navoct][Running/Auto Start]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\Program Files\iesnap\navoct.dll>< >
[ngSlotDaemon / ngSlotD][Running/Auto Start]
  <C:\Program Files\ngsrv\ngslotd.exe><^_^>
[Remote Access Connection Management / Remote Access Connection Management][Stopped/Auto Start]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\Program Files\Messenger\msnhost.dll><N/A>
[Rising Process Communication Center / RsCCenter][Running/Auto Start]
  <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon][Running/Auto Start]
  <"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[Servicel / Servicel][Running/Auto Start]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\jetspeed.dll><>
[SYS ATTRlB / SYSATTRlB][Running/Auto Start]
  <C:\WINDOWS\system32\ATTRlB.EXE><N/A>
[Remote Registry Protect / Trial][Running/Auto Start]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\umsdz.dll><Microsoft Corporation>
[TudingService / Tuding][Running/Auto Start]
  <"c:\program files\tuding\tudingService.exe" -service><体现时代科技(北京)有限公司>
[ykzzts / ykzzts][Running/Auto Start]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\PROGRA~1\lkzzts\lkzzts.dll>< >
[error monitor / EmonSrv][Running/Auto Start]
  <C:\WINDOWS\system32\a40c.exe><N/A>

==================================
驱动程序
[ADProt / ADProt][Running/System Start]
  <\SystemRoot\system32\drivers\ADProt.sys><腾讯科技（深圳）有限公司>
[Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start]
  <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
[AliIde / AliIde][Stopped/Boot Start]
  <\SystemRoot\System32\DRIVERS\aliide.sys><N/A>
[ast / ast][Stopped/Auto Start]
  <\??\C:\WINDOWS\system32\drivers\ast.sys><N/A>
[BaseTDI / BaseTDI][Running/Auto Start]
  <\??\C:\WINDOWS\system32\drivers\basetdi.sys><Beijing Rising Technology Co., Ltd.>
[bccjbfdi / bccjbfdi][Running/Boot Start]
  <\SystemRoot\system32\drivers\bccjbfdi.sys><中国互联网络信息中心(CNNIC)>
[cdnprot / cdnprot][Running/Boot Start]
  <\SystemRoot\system32\drivers\cdnprot.sys><中国互联网络信息中心(CNNIC)>
[CmdIde / CmdIde][Stopped/Boot Start]
  <\SystemRoot\System32\DRIVERS\cmdide.sys><CMD Technology, Inc.>
[enokuk9 / enokuk93][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\enokuk93.sys><N/A>
[ExpScaner / ExpScaner][Running/Auto Start]
  <\??\C:\Program Files\Rising\Rav\ExpScan.sys><>
[fsb / fsb][Stopped/Auto Start]
  <\??\C:\WINDOWS\system32\drivers\fsb.sys><N/A>
[usb Card Device / ft2kEnum][Running/Manual Start]
  <system32\DRIVERS\ic2kenum.sys><OEM Corporation>
[USB Chip Holder Service / GDBaseSmc][Running/Manual Start]
  <system32\DRIVERS\Chip_smc.sys><OEM>
[USB Chip Service / GD_USB][Stopped/Manual Start]
  <system32\DRIVERS\Chip_usb.sys><>
[HookCont / HookCont][Running/Auto Start]
  <\??\C:\Program Files\Rising\Rav\HOOKCONT.sys><Rising>
[HookReg / HookReg][Running/Auto Start]
  <\??\C:\Program Files\Rising\Rav\HookReg.sys><>
[HookSys / HookSys][Running/Auto Start]
  <\??\C:\Program Files\Rising\Rav\HookSys.sys><Rising>
[LanPort / LanPort][Stopped/Auto Start]
  <\??\C:\WINDOWS\system32\drivers\LanPort.sys><N/A>
[MegaIDE / MegaIDE][Stopped/Boot Start]
  <\SystemRoot\System32\DRIVERS\MegaIDE.sys><LSI Logic Corporation.>
[MEMSCAN / MEMSCAN][Running/Auto Start]
  <\??\C:\Program Files\Rising\Rav\MEMSCAN.sys><瑞星软件有限公司>
[msusbbux / msusbbux][Stopped/Auto Start]
  <\??\C:\WINDOWS\system32\drivers\msusbbux.sys><N/A>
[NAVAP / NAVAP][Stopped/Manual Start]
  <\??\C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\NAVAP.sys><N/A>
[NAVAPEL / NAVAPEL][Stopped/Auto Start]
  <\??\C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\NAVAPEL.SYS><N/A>
[NAVENG / NAVENG][Stopped/Manual Start]
  <\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20070417.032\NAVENG.sys><N/A>
[NAVEX15 / NAVEX15][Stopped/Manual Start]
  <\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20070417.032\NAVEX15.sys><N/A>
[ndcia / ndcia][Stopped/Auto Start]
  <\??\C:\WINDOWS\system32\drivers\ndcia.sys><N/A>
[nv / nv][Stopped/Manual Start]
  <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[ptkyvfx / ptkyvfx][Running/Boot Start]
  <\SystemRoot\system32\drivers\ptkyvfx.sys><>
[SmartCard Reader Device  / Reader_Device][Running/Manual Start]
  <system32\DRIVERS\usbic2k.sys><OEM>
[romman / romman][Running/Auto Start]
  <\??\C:\WINDOWS\system32\drivers\romman.sys><Microsoft Corporation>
[RsNTGDI / RsNTGDI][Running/Boot Start]
  <\SystemRoot\system32\Drivers\RsNTGdi.sys><Beijing Rising Technology Co., Ltd.>
[RSPPSYS / RSPPSYS][Running/Auto Start]
  <\??\C:\Program Files\Rising\Rav\RSPPSYS.sys><Rising>
[Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start]
  <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
[Secdrv / Secdrv][Stopped/Manual Start]
  <system32\DRIVERS\secdrv.sys><N/A>
[SiS315 / SiS315][Running/Manual Start]
  <system32\DRIVERS\sisgrp.sys><Silicon Integrated Systems Corporation>
[SiSkp / SiSkp][Running/System Start]
  <system32\DRIVERS\srvkp.sys><Silicon Integrated Systems Corporation>
[stdio / stdio][Running/Auto Start]
  <\??\C:\WINDOWS\system32\drivers\stdio.sys><Microsoft Corporation>
[TAX20002 SMART KEY DRIVER / TAX20002][Stopped/Manual Start]
  <system32\drivers\TAX20002.sys><HSIC System Application Co., Ltd>
[usb token Device Driver / token][Stopped/Manual Start]
  <system32\DRIVERS\eps2kt1.sys><>
[TYKeeper / TYKeeper][Running/Boot Start]
  <\SystemRoot\system32\drivers\TYKeeper.sys><YOK.Com>
[usuhpp0 / usuhpp08][Stopped/Boot Start]
  <\SystemRoot\System32\DRIVERS\usuhpp08.sys><N/A>
[ViaIde / ViaIde][Stopped/Boot Start]
  <\SystemRoot\system32\DRIVERS\viaide.sys><Microsoft Corporation>
[voodoo / voodoo][Stopped/Auto Start]
  <\??\C:\WINDOWS\system32\drivers\voodoo.sys><N/A>
[wifwtid / wifwtid][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\drivers\wifwtid.sys><N/A>
[xpsp5tdi / xpsp5tdi][Running/]
  <2 - 系统找不到指定的文件。
><N/A>
[VideoCapPCI3 / VideoCapPCI3][Running/]
  <2 - 系统找不到指定的文件。
><N/A>
[npkycryp / npkycryp][Stopped/Manual Start]
  <\??\F:\Program Files\Tencent\qq\npkycryp.sys><N/A>
[xpsp5reg / xpsp5reg][Running/]
  <2 - 系统找不到指定的文件。
><N/A>
[VideoCapUSB3 / VideoCapUSB3][Running/]
  <2 - 系统找不到指定的文件。
><N/A>

==================================
浏览器加载项
[QQCycloneHelper Class]
  {00000000-12C9-4305-82F9-43058F20E8D2} <C:\Program Files\Tencent\QQDownload\QQIEHelper01.dll, 腾讯公司>
[Dcbso Class]
  {031AE276-656A-407D-B6E0-6D08E78DE258} <C:\Program Files\Caprica\athena.dll, Adfun>
[Tencent Browser Helper]
  {0C7C23EF-A848-485B-873C-0ED954731014} <C:\Program Files\TENCENT\Adplus\SSAddr.dll, Tencent>
[]
  {21e14e93-61db-48c2-8b0d-4e03f37a8dbf} <C:\WINDOWS\system32\48c2cfsb.dll, N/A>
[msxml]
  {2278622C-7A5D-451f-96F9-DA814693796D} <C:\WINDOWS\system32\msxml1.dll, >
[]
  {480e8136-80c9-4bfc-ae2b-1b294ae19f4f} <C:\WINDOWS\system32\4bfcntos.dll, N/A>
[QQBrowserHelperObject Class]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <f:\Program Files\Tencent\qq\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[CdnForIE Class]
  {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} <C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll, N/A>
[]
  {5F551A91-F949-49C6-812F-1783D14F8D01} <C:\WINDOWS\system32\baisrc3.dll, N/A>
[]
  {6671A431-5C3D-463d-A7CF-5587F9B7E191} <C:\PROGRA~1\snnn\.dll, N/A>
[]
  {669751ED-D558-49AE-B01A-3B374CC7910E} <C:\WINDOWS\system32\ssup.dll, TENCENT>
[ExtentIE Class]
  {66C2C482-D4EE-42A5-AEF7-0B124F278D47} <C:\WINDOWS\system32\ba40.dll, TODO: <公司名>>
[实用搜索]
  {6CFD436C-7AAD-4e50-992F-C0C87A94CAD2} <C:\Program Files\superutilbar\superutilbar.dll, www.shiyongsousuo.com>
[YOK]
  {75FE2B5A-D3A4-4EFA-AC11-ADC9C9459688} <C:\Program Files\yok\toolbar.dll, YOK.Com>
[IE6Ex Class]
  {7919E068-36F0-4BD6-9C2F-1785F81DB9AE} <C:\WINDOWS\system32\MICSOFT.DLL, micsoft>
[WinSC Class]
  {9ACEEE31-1440-471B-AA46-72B061FE7D61} <C:\WINDOWS\system32\SCIntruder32.dll, N/A>
[IeCatch2 Class]
  {A5366673-E8CA-11D3-9CD9-0090271D075B} <C:\PROGRA~1\FLASHGET\jccatch.dll, Amaze Soft>
[jeee]
  {CFF7B6AA-3209-46BC-89A1-4587D52AB568} <C:\PROGRA~1\snnn\wrrr.dll, >
[AlxTB BHO Class]
  {F1FABE79-25FC-46de-8C5A-2C6DB9D64333} <C:\WINDOWS\system32\AlxTB1.dll, Alexa Internet>
[WinMyFavor Class]
  {F7F49040-389C-4f1f-A825-06D5328EAE59} <C:\WINDOWS\system32\MyFavor.dll, N/A>
[豪杰超级解霸V8]
  {367E0A21-8601-4986-9C9A-153BF5ACA118} <C:\Herosoft\HeroV8\STHSDVD.EXE, herosoft>
[CdnForIE Class]
  {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} <C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll, N/A>
[JUJU猫]
  {6096E38F-5AC1-4391-8EC4-75DFA92FB32F} <http://www.jujumao.net, N/A>
[@shdoclc.dll,-866]
  {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <F:\Program Files\Tencent\qq\QQ.EXE, TENCENT>
[FlashGet]
  {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\flashget.exe, Amaze Soft>
[QQIEFloatBarCfgCmd Class]
  {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <f:\Program Files\Tencent\qq\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[Messenger]
  {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[CaiFuCOM Class]
  {C1F0024B-8278-4999-B7E6-2718426D9FE6} <C:\Program Files\财富通\caifu.dll, N/A>
[FlashGet Bar]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\fgiebar.dll, Amaze Soft>
[实用搜索工具条2.0]
  {03465FF5-00AE-411a-9C34-960ED566EC03} <C:\Program Files\superutilbar\superutilbar.dll, www.shiyongsousuo.com>
[Alexa]
  {3CEFF6CD-6F08-4e4d-BCCD-FF7415288C3B} <C:\WINDOWS\system32\SHDOCVW.DLL, Microsoft Corporation>
[80c9]
  {DFCB34B6-902D-426E-AE2B-1B294AE19F4F} <C:\WINDOWS\system32\4bfcntos.dll, N/A>
[CEditCtrl Object]
  {488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\WINDOWS\system32\aliedit\AliEdit.dll, www.alipay.com>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[AxUSBKey Class]
  {DA215190-98B2-47DE-AE24-DA95481DFFBA} <C:\WINDOWS\system32\USBKey.dll, >
[QQCycloneHelper Class]
  {00000000-12C9-4305-82F9-43058F20E8D2} <C:\Program Files\Tencent\QQDownload\QQIEHelper01.dll, 腾讯公司>
[Dcbso Class]
  {031AE276-656A-407D-B6E0-6D08E78DE258} <C:\Program Files\Caprica\athena.dll, Adfun>
[实用搜索工具条2.0]
  {03465FF5-00AE-411A-9C34-960ED566EC03} <C:\Program Files\superutilbar\superutilbar.dll, www.shiyongsousuo.com>
[Tencent Browser Helper]
  {0C7C23EF-A848-485B-873C-0ED954731014} <C:\Program Files\TENCENT\Adplus\SSAddr.dll, Tencent>
[]
  {0DBC9AAF-A13D-450F-8B0D-4E03F37A8DBF} <C:\WINDOWS\system32\450fcfsb.dll, N/A>
[InfosecCertInstall Class]
  {0EB487C8-E9AC-43A6-8C4C-083999B0622F} <C:\WINDOWS\system32\certInStall.dll, >
[]
  {14D4FD00-9F94-4299-AE2B-1B294AE19F4F} <C:\WINDOWS\system32\4299ntos.dll, N/A>
[]
  {21E14E93-61DB-48C2-8B0D-4E03F37A8DBF} <C:\WINDOWS\system32\48c2cfsb.dll, N/A>
[msxml]
  {2278622C-7A5D-451F-96F9-DA814693796D} <C:\WINDOWS\system32\msxml1.dll, >
[Windows Media Player]
  {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[HTML Document]
  {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
[]
  {345D5D0C-769F-4535-AE2B-1B294AE19F4F} <C:\WINDOWS\system32\4535ntos.dll, N/A>
[Alexa]
  {3CEFF6CD-6F08-4E4D-BCCD-FF7415288C3B} <C:\WINDOWS\system32\SHDOCVW.DLL, Microsoft Corporation>
[]
  {480E8136-80C9-4BFC-AE2B-1B294AE19F4F} <C:\WINDOWS\system32\4bfcntos.dll, N/A>
[QQBrowserHelperObject Class]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <f:\Program Files\Tencent\qq\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[CdnForIE Class]
  {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} <C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll, N/A>
[]
  {5F551A91-F949-49C6-812F-1783D14F8D01} <C:\WINDOWS\system32\baisrc3.dll, N/A>
[InfoSecNetSign Class]
  {62B938C4-4190-4F37-8CF0-A92B0A91CC77} <C:\WINDOWS\system32\NetSign.dll, Infosec Technologies Co., Ltd.>
[]
  {63C2BDCE-0006-4F21-AE2B-1B294AE19F4F} <C:\WINDOWS\system32\4f21ntos.dll, N/A>
[]
  {6671A431-5C3D-463D-A7CF-5587F9B7E191} <C:\PROGRA~1\snnn\.dll, N/A>
[]
  {669751ED-D558-49AE-B01A-3B374CC7910E} <C:\WINDOWS\system32\ssup.dll, TENCENT>
[ExtentIE Class]
  {66C2C482-D4EE-42A5-AEF7-0B124F278D47} <C:\WINDOWS\system32\ba40.dll, TODO: <公司名>>
[YOKHttpFilter Class]
  {686D3343-D00D-49A1-96DF-66F3AF62F348} <C:\Program Files\yok\adblock.dll, YOK.Com>
[Windows Media Player]
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[实用搜索]
  {6CFD436C-7AAD-4E50-992F-C0C87A94CAD2} <C:\Program Files\superutilbar\superutilbar.dll, www.shiyongsousuo.com>
[CCtInf Class]
  {6DBB2904-082D-4DB0-944A-21C22BA121F4} <C:\WINDOWS\system32\BANKCE~1.DLL, >
[]
  {6ED1CC77-964D-4157-8B0D-4E03F37A8DBF} <C:\WINDOWS\system32\4157cfsb.dll, N/A>
[YOKAdBlock Class]
  {718F4AD3-70D4-425E-9159-5598DFC732ED} <C:\Program Files\yok\adblock.dll, YOK.Com>
[AxInputControl Class]
  {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} <C:\WINDOWS\system32\INPUTC~1.DLL, >
[YOK]
  {75FE2B5A-D3A4-4EFA-AC11-ADC9C9459688} <C:\Program Files\yok\toolbar.dll, YOK.Com>
[IE6Ex Class]
  {7919E068-36F0-4BD6-9C2F-1785F81DB9AE} <C:\WINDOWS\system32\MICSOFT.DLL, micsoft>
[YOKAutoLive]
  {7D0E8987-BA21-483a-B1AC-149DA2F39A5A} <C:\Program Files\yok\autolive.dll, YOK.Com>
[ContextSearch Class]
  {88351CEF-BAC0-4A9B-8380-31A173E2926F} <C:\Program Files\yok\toolbar.dll, YOK.Com>
[Microsoft Web 浏览器]
  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[AxSubmitControl Class]
  {8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} <C:\WINDOWS\system32\SUBMIT~1.DLL, >
[WinSC Class]
  {9ACEEE31-1440-471B-AA46-72B061FE7D61} <C:\WINDOWS\system32\SCIntruder32.dll, N/A>
[相关搜索]
  {A29F7F71-DCDB-412D-B19A-2002DC966E33} <C:\PROGRA~1\yok\relband.dll, YOK.Com>
[]
  {A409C641-58C0-4FBC-8B0D-4E03F37A8DBF} <C:\WINDOWS\system32\4fbccfsb.dll, N/A>
[IeCatch2 Class]
  {A5366673-E8CA-11D3-9CD9-0090271D075B} <C:\PROGRA~1\FLASHGET\jccatch.dll, Amaze Soft>
[SearchAssistantOC]
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[RDS.DataSpace]
  {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
[CSetLET Class]
  {C35D7AE1-0865-4A30-BF07-29FA29324155} <C:\WINDOWS\system32\GDSetLET.dll, >
[jeee]
  {CFF7B6AA-3209-46BC-89A1-4587D52AB568} <C:\PROGRA~1\snnn\wrrr.dll, >
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[UpdateC2 Control]
  {DC7094C6-8F61-42ED-AECE-63F5EEF647C5} <C:\PROGRA~1\UUSee\updateC2.ocx, uusee.com>
[80c9]
  {DFCB34B6-902D-426E-AE2B-1B294AE19F4F} <C:\WINDOWS\system32\4bfcntos.dll, N/A>
[FlashGet Bar]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\fgiebar.dll, Amaze Soft>
[AlxTB BHO Class]
  {F1FABE79-25FC-46DE-8C5A-2C6DB9D64333} <C:\WINDOWS\system32\AlxTB1.dll, Alexa Internet>
[WinMyFavor Class]
  {F7F49040-389C-4F1F-A825-06D5328EAE59} <C:\WINDOWS\system32\MyFavor.dll, N/A>
[]
  {F869BB38-FFEF-4589-B986-610B7AD0ADA2} <C:\Program Files\yok\toolbar.dll, YOK.Com>
[&使用超级旋风下载]
  <C:\Program Files\Tencent\QQDownload\geturl.htm, N/A>
[&使用超级旋风下载全部链接]
  <C:\Program Files\Tencent\QQDownload\getAllurl.htm, N/A>
[Alexa Web Search]
  <http://client.alexa.com/holiday/script/actions/search.htm, N/A>
[Get Alexa Data]
  <http://client.alexa.com/holiday/script/actions/sitedata.htm, N/A>
[Mail to a Friend...]
  <http://client.alexa.com/holiday/script/actions/mailto.htm, N/A>
[See Related Links]
  <http://client.alexa.com/holiday/script/actions/related.htm, N/A>
[Write a Review...]
  <http://client.alexa.com/holiday/script/actions/review.htm, N/A>
[上传到QQ网络硬盘]
  <F:\Program Files\Tencent\qq\AddToNetDisk.htm, N/A>
[使用网际快车下载]
  <C:\PROGRA~1\FLASHGET\jc_link.htm, N/A>
[使用网际快车下载全部链接]
  <C:\PROGRA~1\FLASHGET\jc_all.htm, N/A>
[导出到 Microsoft Office Excel(&X)]
  <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
[添加到QQ自定义面板]
  <F:\Program Files\Tencent\qq\AddPanel.htm, N/A>
[添加到QQ表情]
  <F:\Program Files\Tencent\qq\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <F:\Program Files\Tencent\qq\SendMMS.htm, N/A>
[访问通用网址]
  <C:\Program Files\CNNIC\Cdn\cnnic.htm, N/A>
[豪杰超级解霸V8实时播放]
  <C:\Herosoft\HeroV8\MPURLGET.HTM, N/A>

==================================
正在运行的进程
[PID: 444][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 500][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 524][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\cryptig.dll]  [Microsoft Corporation, 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 568][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 580][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 732][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 824][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 908][C:\Program Files\Rising\Rav\CCenter.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3]
[PID: 924][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [c:\windows\system32\struts.dll]  [, 1, 0, 0, 2]
    [c:\progra~1\common~1\lhestzd\lhestzd.dll]  [ , 2, 8, 0, 1]
    [C:\PROGRA~1\COMMON~1\yatt\lggg.dll]  [, 1, 0, 0, 6]
    [C:\PROGRA~1\COMMON~1\yatt\qlll.dll]  [ , 1, 0, 0, 6]
    [c:\progra~1\common~1\lhestzd\fjbpbya.nls]  [, 2, 6, 0, 2]
    [c:\program files\iesnap\navoct.dll]  [ , 1, 0, 1, 1]
    [c:\PROGRA~1\iesnap\navstub.dll]  [, 1, 0, 1, 1]
    [c:\windows\system32\jetspeed.dll]  [, 1, 0, 0, 2]
    [c:\windows\system32\umsdz.dll]  [Microsoft Corporation, 5.1.2600.0]
    [c:\progra~1\lkzzts\lkzzts.dll]  [ , 5, 8, 0, 2]
    [c:\progra~1\lkzzts\lkzznq.nls]  [, 5, 6, 0, 2]
    [c:\progra~1\lkzzts\lkzyhd.nls]  [ , 5, 8, 0, 2]
[PID: 996][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1100][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1112][C:\Program Files\Rising\Rav\Ravmond.exe]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 43]
    [C:\Program Files\Rising\Rav\BWList.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Rising\Rav\rfwctrl.dll]  [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11]
    [C:\Program Files\Rising\Rav\RsPPsys.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3]
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
    [C:\Program Files\Rising\Rav\RsLog.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20]
    [C:\Program Files\Rising\Rav\HOOKSYS.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 0]
    [C:\Program Files\Rising\Rav\Scanner.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 12]
    [C:\Program Files\Rising\Rav\libload.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16]
    [C:\Program Files\Rising\Rav\VirusLib.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10]
    [C:\Program Files\Rising\Rav\regmon.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6]
    [C:\Program Files\Rising\Rav\psapi.dll]  [Microsoft Corporation, 4.00]
    [C:\Program Files\Rising\Rav\HookWeb.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 1]
    [C:\Program Files\Rising\Rav\MemMon.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 12]
    [C:\Program Files\Rising\Rav\expscan.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\Program Files\Rising\Rav\mPorts.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3]
    [C:\Program Files\Rising\Rav\HookCont.dll]  [Rising, 19, 0, 0, 0]
    [C:\Program Files\Rising\Rav\SpamEng.dll]  [, 18, 0, 0, 6]
    [C:\Program Files\Rising\Rav\engine.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 25]
    [C:\Program Files\Rising\Rav\PostTrt.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 8]
    [C:\Program Files\Rising\Rav\UnExe.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10]
    [C:\Program Files\Rising\Rav\ScanExec.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16]
    [C:\Program Files\Rising\Rav\ScanEx.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 40]
    [C:\Program Files\Rising\Rav\ExtFile.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 25]
    [C:\Program Files\Rising\Rav\NvFile.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 11]
    [C:\Program Files\Rising\Rav\ScanMac.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 13]
    [C:\Program Files\Rising\Rav\ScanSct.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19]
[PID: 1644][C:\WINDOWS\Explorer.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\RavExt.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9]
    [c:\progra~1\common~1\lhestzd\fjbpbya.nls]  [, 2, 6, 0, 2]
    [C:\PROGRA~1\COMMON~1\yatt\lggg.dll]  [, 1, 0, 0, 6]
    [C:\PROGRA~1\COMMON~1\yatt\qlll.dll]  [ , 1, 0, 0, 6]
    [C:\Program Files\yok\yok.dll]  [YOK.Com, 3, 0, 0, 1003]
    [C:\WINDOWS\downlo~1\Vbmac.dll]  [Tencent, 4, 4, 2, 29]
    [C:\WINDOWS\system32\dhpc\wins.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\wbem\vjhaehwm.dll]  [Microsoft Corporation, 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\dhpc\plugins\net1.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\dyvv\esww.nls]  [N/A, ]
    [C:\WINDOWS\system32\dhpc\plugins\net2.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\dhpc\plugins\net3.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\yok\toolbar.dll]  [YOK.Com, 3, 1, 0, 1000]
    [C:\WINDOWS\system32\dhpc\plugins\net4.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\yok\adblock.dll]  [YOK.Com, 3, 0, 0, 1003]
    [C:\Program Files\yok\protect.dll]  [YOK.Com, 3, 0, 0, 1002]
    [C:\Program Files\yok\relband.dll]  [YOK.Com, 3, 1, 0, 1004]
    [C:\Program Files\yok\autolive.dll]  [YOK.Com, 3, 0, 0, 1002]
    [C:\Program Files\Caprica\apollo.dll]  [Adfun, 1, 0, 0, 1]
    [C:\WINDOWS\system32\javascript.dll]  [, 1.1.1.171]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [c:\PROGRA~1\iesnap\navstub.dll]  [, 1, 0, 1, 1]
    [c:\progra~1\lkzzts\lkzznq.nls]  [, 5, 6, 0, 2]
    [c:\progra~1\lkzzts\lkzyhd.nls]  [ , 5, 8, 0, 2]
    [C:\Program Files\superutilbar\superutilbar.dll]  [www.shiyongsousuo.com, 2, 1, 8, 24]
    [C:\WINDOWS\system32\40c3.dll]  [N/A, ]
    [C:\WINDOWS\system32\4ba4.dll]  [  , 1, 0, 0, 3]
    [C:\PROGRA~1\FLASHGET\jccatch.dll]  [Amaze Soft, 1, 1, 4, 0]
    [C:\WINDOWS\TEMP\jtemp\scanf.dll]  [N/A, ]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[PID: 2000][C:\WINDOWS\SOUNDMAN.EXE]  [Realtek Semiconductor Corp., 5.1.0.40]
    [c:\progra~1\common~1\lhestzd\fjbpbya.nls]  [, 2, 6, 0, 2]
    [C:\PROGRA~1\COMMON~1\yatt\lggg.dll]  [, 1, 0, 0, 6]
    [C:\PROGRA~1\COMMON~1\yatt\qlll.dll]  [ , 1, 0, 0, 6]
    [C:\WINDOWS\downlo~1\Vbmac.dll]  [Tencent, 4, 4, 2, 29]
    [C:\WINDOWS\system32\40c3.dll]  [N/A, ]
    [C:\WINDOWS\system32\4ba4.dll]  [  , 1, 0, 0, 3]
    [C:\Program Files\Caprica\apollo.dll]  [Adfun, 1, 0, 0, 1]
    [c:\progra~1\lkzzts\lkzznq.nls]  [, 5, 6, 0, 2]
    [c:\progra~1\lkzzts\lkzyhd.nls]  [ , 5, 8, 0, 2]
    [c:\PROGRA~1\iesnap\navstub.dll]  [, 1, 0, 1, 1]
[PID: 2008][C:\Program Files\95599 Certificate Tools\SHANGHAI TAX\TaxKeyManager.exe]  [, 2, 2, 0, 1]
    [c:\progra~1\common~1\lhestzd\fjbpbya.nls]  [, 2, 6, 0, 2]
    [C:\PROGRA~1\COMMON~1\yatt\lggg.dll]  [, 1, 0, 0, 6]
    [C:\PROGRA~1\COMMON~1\yatt\qlll.dll]  [ , 1, 0, 0, 6]
    [C:\WINDOWS\downlo~1\Vbmac.dll]  [Tencent, 4, 4, 2, 29]
    [C:\Program Files\Caprica\apollo.dll]  [Adfun, 1, 0, 0, 1]
    [c:\PROGRA~1\iesnap\navstub.dll]  [, 1, 0, 1, 1]
    [c:\progra~1\lkzzts\lkzznq.nls]  [, 5, 6, 0, 2]
    [c:\progra~1\lkzzts\lkzyhd.nls]  [ , 5, 8, 0, 2]
    [C:\WINDOWS\system32\40c3.dll]  [N/A, ]
    [C:\WINDOWS\system32\4ba4.dll]  [  , 1, 0, 0, 3]
[PID: 2016][C:\WINDOWS\system32\SafeSignCertReg.exe]  [A.E.T. Europe B.V., 2.0.0.2]
    [c:\progra~1\common~1\lhestzd\fjbpbya.nls]  [, 2, 6, 0, 2]
    [C:\PROGRA~1\COMMON~1\yatt\lggg.dll]  [, 1, 0, 0, 6]
    [C:\PROGRA~1\COMMON~1\yatt\qlll.dll]  [ , 1, 0, 0, 6]
    [C:\WINDOWS\system32\40c3.dll]  [N/A, ]
    [C:\WINDOWS\system32\4ba4.dll]  [  , 1, 0, 0, 3]

[PID: 160][C:\Program Files\ngsrv\ep2k_certd.exe]  [, 1, 0, 5, 1227]
    [C:\WINDOWS\system32\ep2pk11.dll]  [^_^, 1, 1, 5, 1221]
    [C:\WINDOWS\downlo~1\Vbmac.dll]  [Tencent, 4, 4, 2, 29]
    [C:\Program Files\Caprica\apollo.dll]  [Adfun, 1, 0, 0, 1]
    [c:\PROGRA~1\iesnap\navstub.dll]  [, 1, 0, 1, 1]
    [c:\progra~1\common~1\lhestzd\fjbpbya.nls]  [, 2, 6, 0, 2]
    [C:\PROGRA~1\COMMON~1\yatt\lggg.dll]  [, 1, 0, 0, 6]
    [C:\PROGRA~1\COMMON~1\yatt\qlll.dll]  [ , 1, 0, 0, 6]
    [c:\progra~1\lkzzts\lkzznq.nls]  [, 5, 6, 0, 2]
    [c:\progra~1\lkzzts\lkzyhd.nls]  [ , 5, 8, 0, 2]
    [C:\WINDOWS\system32\40c3.dll]  [N/A, ]
    [C:\WINDOWS\system32\4ba4.dll]  [  , 1, 0, 0, 3]
[PID: 168][C:\Program Files\Caprica\spoolsx.exe]  [Adfun, 1, 0, 0, 1]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\WINDOWS\system32\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\downlo~1\Vbmac.dll]  [Tencent, 4, 4, 2, 29]
    [c:\progra~1\common~1\lhestzd\fjbpbya.nls]  [, 2, 6, 0, 2]
    [C:\PROGRA~1\COMMON~1\yatt\lggg.dll]  [, 1, 0, 0, 6]
    [C:\PROGRA~1\COMMON~1\yatt\qlll.dll]  [ , 1, 0, 0, 6]
    [C:\Program Files\Caprica\apollo.dll]  [Adfun, 1, 0, 0, 1]
    [C:\WINDOWS\system32\40c3.dll]  [N/A, ]
    [C:\WINDOWS\system32\4ba4.dll]  [  , 1, 0, 0, 3]
    [c:\progra~1\lkzzts\lkzznq.nls]  [, 5, 6, 0, 2]
    [c:\progra~1\lkzzts\lkzyhd.nls]  [ , 5, 8, 0, 2]
    [c:\PROGRA~1\iesnap\navstub.dll]  [, 1, 0, 1, 1]
[PID: 236][C:\Program Files\Rising\Rav\RavTask.exe]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 7]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\WINDOWS\downlo~1\Vbmac.dll]  [Tencent, 4, 4, 2, 29]
    [c:\progra~1\common~1\lhestzd\fjbpbya.nls]  [, 2, 6, 0, 2]
    [C:\PROGRA~1\COMMON~1\yatt\lggg.dll]  [, 1, 0, 0, 6]
    [C:\PROGRA~1\COMMON~1\yatt\qlll.dll]  [ , 1, 0, 0, 6]
[PID: 252][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\downlo~1\Vbmac.dll]  [Tencent, 4, 4, 2, 29]
    [c:\progra~1\common~1\lhestzd\fjbpbya.nls]  [, 2, 6, 0, 2]
    [C:\PROGRA~1\COMMON~1\yatt\lggg.dll]  [, 1, 0, 0, 6]
    [C:\PROGRA~1\COMMON~1\yatt\qlll.dll]  [ , 1, 0, 0, 6]
    [C:\WINDOWS\system32\dhpc\wins.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\40c3.dll]  [N/A, ]
    [C:\WINDOWS\system32\4ba4.dll]  [  , 1, 0, 0, 3]
[PID: 384][C:\Program Files\Rising\Rav\Ravmon.exe]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 45]
    [C:\Program Files\Rising\Rav\RsGuiLib.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 33]
    [C:\Program Files\Rising\Rav\BWList.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10]
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Rising\Rav\RsXML.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2]
    [C:\Program Files\Rising\Rav\PngDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
    [C:\WINDOWS\downlo~1\Vbmac.dll]  [Tencent, 4, 4, 2, 29]
    [c:\progra~1\common~1\lhestzd\fjbpbya.nls]  [, 2, 6, 0, 2]
    [C:\PROGRA~1\COMMON~1\yatt\lggg.dll]  [, 1, 0, 0, 6]
    [C:\PROGRA~1\COMMON~1\yatt\qlll.dll]  [ , 1, 0, 0, 6]
    [C:\Program Files\Caprica\apollo.dll]  [Adfun, 1, 0, 0, 1]
    [c:\PROGRA~1\iesnap\navstub.dll]  [, 1, 0, 1, 1]
    [c:\progra~1\lkzzts\lkzznq.nls]  [, 5, 6, 0, 2]
    [c:\progra~1\lkzzts\lkzyhd.nls]  [ , 5, 8, 0, 2]
    [c:\progra~1\lkzzts\lkzihgs.dat]  [ , 5, 6, 0, 2]
    [c:\progra~1\lkzzts\lkzyhd.nls]  [ , 5, 8, 0, 2]
    [C:\WINDOWS\downlo~1\Vbmac.dll]  [Tencent, 4, 4, 2, 29]
    [C:\Program Files\Caprica\apollo.dll]  [Adfun, 1, 0, 0, 1]
    [c:\progra~1\lkzzts\lkzznq.nls]  [, 5, 6, 0, 2]
    [c:\PROGRA~1\iesnap\navstub.dll]  [, 1, 0, 1, 1]
    [c:\progra~1\common~1\lhestzd\fjbpbya.nls]  [, 2, 6, 0, 2]
    [C:\PROGRA~1\COMMON~1\yatt\lggg.dll]  [, 1, 0, 0, 6]
    [C:\PROGRA~1\COMMON~1\yatt\qlll.dll]  [ , 1, 0, 0, 6]
    [c:\progra~1\lkzzts\lkztxv.dll]  [ , 5, 7, 0, 2]
[PID: 3400][c:\PROGRA~1\iesnap\navplay.exe]  [, 1, 0, 1, 1]
    [C:\WINDOWS\downlo~1\Vbmac.dll]  [Tencent, 4, 4, 2, 29]
    [C:\Program Files\Caprica\apollo.dll]  [Adfun, 1, 0, 0, 1]
    [c:\progra~1\lkzzts\lkzznq.nls]  [, 5, 6, 0, 2]
    [c:\progra~1\lkzzts\lkzyhd.nls]  [ , 5, 8, 0, 2]
    [c:\PROGRA~1\iesnap\navstub.dll]  [, 1, 0, 1, 1]
    [c:\progra~1\common~1\lhestzd\fjbpbya.nls]  [, 2, 6, 0, 2]
    [C:\PROGRA~1\COMMON~1\yatt\lggg.dll]  [, 1, 0, 0, 6]
    [C:\PROGRA~1\COMMON~1\yatt\qlll.dll]  [ , 1, 0, 0, 6]
[PID: 2760][C:\WINDOWS\system32\conime.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\downlo~1\Vbmac.dll]  [Tencent, 4, 4, 2, 29]
    [C:\Program Files\Caprica\apollo.dll]  [Adfun, 1, 0, 0, 1]
    [c:\progra~1\lkzzts\lkzznq.nls]  [, 5, 6, 0, 2]
    [c:\progra~1\lkzzts\lkzyhd.nls]  [ , 5, 8, 0, 2]
    [c:\PROGRA~1\iesnap\navstub.dll]  [, 1, 0, 1, 1]
    [c:\progra~1\common~1\lhestzd\fjbpbya.nls]  [, 2, 6, 0, 2]
    [C:\PROGRA~1\COMMON~1\yatt\lggg.dll]  [, 1, 0, 0, 6]
    [C:\PROGRA~1\COMMON~1\yatt\qlll.dll]  [ , 1, 0, 0, 6]
    [C:\WINDOWS\system32\dhpc\wins.dll]  [, 1, 0, 0, 1]
[PID: 3520][c:\program files\rising\rav\inbuild.exe]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2]
[PID: 2720][c:\program files\rising\rav\Rav.exe]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 28]
    [c:\program files\rising\rav\PlugIn\RsPgScan.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 17]
    [c:\program files\rising\rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [c:\program files\rising\rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
    [c:\program files\rising\rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [c:\program files\rising\rav\RavUI.Dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 30]
    [c:\program files\rising\rav\RsGuiLib.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 33]
    [c:\program files\rising\rav\RsXML.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2]
    [C:\WINDOWS\downlo~1\Vbmac.dll]  [Tencent, 4, 4, 2, 29]
    [C:\Program Files\Caprica\apollo.dll]  [Adfun, 1, 0, 0, 1]
    [c:\progra~1\lkzzts\lkzznq.nls]  [, 5, 6, 0, 2]
    [c:\progra~1\lkzzts\lkzyhd.nls]  [ , 5, 8, 0, 2]
    [c:\PROGRA~1\iesnap\navstub.dll]  [, 1, 0, 1, 1]
    [c:\progra~1\common~1\lhestzd\fjbpbya.nls]  [, 2, 6, 0, 2]
    [C:\PROGRA~1\COMMON~1\yatt\lggg.dll]  [, 1, 0, 0, 6]
    [C:\PROGRA~1\COMMON~1\yatt\qlll.dll]  [ , 1, 0, 0, 6]
    [c:\program files\rising\rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
    [C:\Program Files\Rising\Rav\Scanner.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 12]
    [c:\program files\rising\rav\BWList.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10]
    [C:\Program Files\Rising\Rav\libload.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16]
    [C:\Program Files\Rising\Rav\VirusLib.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10]
    [C:\Program Files\Rising\Rav\engine.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 25]
    [C:\Program Files\Rising\Rav\UnExe.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10]
[PID: 228][C:\Downloads\SREng.EXE]  [Smallfrogs Studio, 2.4.12.806]
    [C:\WINDOWS\downlo~1\Vbmac.dll]  [Tencent, 4, 4, 2, 29]
    [C:\Program Files\Caprica\apollo.dll]  [Adfun, 1, 0, 0, 1]
    [c:\progra~1\lkzzts\lkzznq.nls]  [, 5, 6, 0, 2]
    [c:\progra~1\lkzzts\lkzyhd.nls]  [ , 5, 8, 0, 2]
    [c:\PROGRA~1\iesnap\navstub.dll]  [, 1, 0, 1, 1]
    [c:\progra~1\common~1\lhestzd\fjbpbya.nls]  [, 2, 6, 0, 2]
    [C:\PROGRA~1\COMMON~1\yatt\lggg.dll]  [, 1, 0, 0, 6]
    [C:\PROGRA~1\COMMON~1\yatt\qlll.dll]  [ , 1, 0, 0, 6]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost

==================================
API HOOK
N/A

==================================
隐藏进程
    [376] C:\Program Files\Common Files\xp5update.exe
    [388] C:\Program Files\Common Files\VideoCap3.exe
    [2308] C:\Program Files\Internet Explorer\IEXPLORE.EXE

==================================


[/CODE]

大家帮帮忙,谢谢

没有人会看吗？

很急的,哪个高手帮帮忙

瑞星费了?

流氓软件太多了

先清理下再扫

你把机子搞大发了,,,,,安全模式下清理流氓软件和病毒...在装个ssm..看看把看着不顺眼的全禁止掉.就好了