[F:\Maxthon2\mxpp.dll] [Maxthon, 1, 0, 0, 50]
[F:\Maxthon2\MxSk.dll] [Maxthon, 1, 0, 0, 119]
[F:\Maxthon2\MxProxy2.dll] [, 1, 0, 0, 3356]
[F:\Maxthon2\MxFav.dll] [Maxthon, 1, 0, 0, 200]
[F:\Maxthon2\maxzlib.dll] [, 1.2.3]
[F:\Maxthon2\mxtool.dll] [, 1, 0, 0, 1]
[F:\Maxthon2\mxfeedU.dll] [, 1, 0, 45, 62]
[C:\WINDOWS\system32\msxml4.dll] [Microsoft Corporation, 4.20.9841.0]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[f:\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[D:\UC talk\UTHook.dll] [2005- 新浪信息技术有限公司, 1, 70, 0, 1]
[PID: 1732 / bobo][F:\〈qq2006〉\QQ.exe] [TENCENT, 7,0,313,1681]
[F:\〈qq2006〉\CoralAssist.dll] [Coral Team, 5.0.0 build 20060829]
[F:\〈qq2006〉\CoralQQ.dll] [Coral Team, 5.0.1a Build 20070620]
[F:\〈qq2006〉\kql.dll] [Coral Team, 5.0.1a build 20070620]
[F:\〈qq2006〉\MSVCP80.dll] [Microsoft Corporation, 8.00.50727.42]
[F:\〈qq2006〉\MSVCR80.dll] [Microsoft Corporation, 8.00.50727.42]
[F:\〈qq2006〉\mfc42.dll] [Microsoft Corporation, 6.00.8665.0]
[F:\〈qq2006〉\ipsearcher.dll] [, 1.0.0.5]
[F:\〈qq2006〉\QQBaseClassInDll.dll] [TENCENT, 7,0,313,1681]
[F:\〈qq2006〉\QQHelperDll.dll] [TENCENT, 7,0,313,1681]
[F:\〈qq2006〉\BasicCtrlDll.dll] [TENCENT, 7, 0, 225, 1651]
[F:\〈qq2006〉\NoDisturbFilter.cqx] [Coral Team, 1.0]
[F:\〈qq2006〉\ConfigHotkey.cqx] [Coral Team, 1.0]
[F:\〈qq2006〉\RICHED32.DLL] [Microsoft Corporation, 5.00.2134.1]
[F:\〈qq2006〉\RICHED20.dll] [Microsoft Corporation, 5.31.23.1218]
[F:\〈qq2006〉\QQAPI.dll] [TENCENT, 7,0,313,1681]
[F:\〈qq2006〉\TIMProxy.dll] [tencent, 0, 3, 2, 4]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[F:\〈qq2006〉\AutoReconnect.cqx] [Coral Team, 1.0.0]
[F:\〈qq2006〉\LoginCtrl.dll] [TENCENT, 7,0,313,1681]
[F:\〈qq2006〉\LoginCtrlRes.dll] [TENCENT, 7,0,313,1681]
[F:\〈qq2006〉\QQRes.dll] [TENCENT, 7,0,313,1681]
[F:\〈qq2006〉\MailSummary.dll] [TENCENT, 7,0,313,1681]
[F:\〈qq2006〉\QQMainFrame.dll] [N/A, ]
[F:\〈qq2006〉\gdiplus.dll] [Microsoft Corporation, 5.1.3102.2180 (xpsp_sp2_rtm.040803-2158)]
[F:\〈qq2006〉\CQQApplication.dll] [N/A, ]
[F:\〈qq2006〉\FlashAvatarDll.dll] [, 1, 4, 0, 1]
[F:\〈qq2006〉\NewSkin.dll] [TENCENT, 7,0,313,1681]
[F:\〈qq2006〉\HostingMgr.dll] [TENCENT, 7,0,313,1681]
[F:\〈qq2006〉\CameraDll.dll] [TENCENT, 7,0,313,1681]
[F:\〈qq2006〉\CoralHotkey.cqx] [Coral Team, 1.0]
[F:\〈qq2006〉\QQKnowledgeSearch.dll] [TENCENT, 7,0,313,1681]
[F:\〈qq2006〉\QQAllInOne.dll] [TENCENT, 7,0,313,1681]
[F:\〈qq2006〉\SCCore.dll] [TENCENT, 1, 6, 0, 2]
[F:\〈qq2006〉\QQSpace.dll] [TENCENT, 7,0,313,1681]
[F:\〈qq2006〉\vbscript.dll] [Microsoft Corporation, 5.6.0.7426]
[C:\WINDOWS\system32\msdmo.dll] [, ]
[F:\〈qq2006〉\QQGroupMng.dll] [TENCENT, 7,0,313,1681]
[F:\〈qq2006〉\QQSettingCtrl.dll] [TENCENT, 7,0,313,1681]
[F:\〈qq2006〉\QQSysMsgMng.dll] [N/A, ]
[F:\〈qq2006〉\UserDefinedHead.dll] [TENCENT, 7,0,313,1681]
[F:\〈qq2006〉\QQPlugin.dll] [N/A, ]
[F:\〈qq2006〉\QQConfigPlugin.dll] [TENCENT, 7,0,313,1681]
[F:\〈qq2006〉\QQAvatar.dll] [N/A, ]
[F:\〈qq2006〉\LongConnection.dll] [TENCENT, 7,0,313,1681]
[F:\〈qq2006〉\QRingMng.dll] [N/A, ]
[F:\〈qq2006〉\QQPet.dll] [TENCENT, 7,0,313,1681]
[F:\〈qq2006〉\PhoneAPI.dll] [TENCENT, 7,0,313,1681]
[F:\〈qq2006〉\DialerAllinOne.dll] [tencent, 1, 4, 0, 0]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[F:\〈qq2006〉\BQQApplication.dll] [N/A, ]
[F:\〈qq2006〉\PersonalDesktop.dll] [TENCENT, 7,0,313,1681]
[F:\〈qq2006〉\CommercesMng.dll] [TENCENT, 7,0,313,1681]
[F:\〈qq2006〉\QQAddr.dll] [深圳市腾讯计算机系统有限公司, 5, 0, 101, 310]
[F:\〈qq2006〉\QQSceneMng.dll] [N/A, ]
[F:\〈qq2006〉\AddrSearch.dll] [腾讯科技（深圳）有限公司, 2, 1, 9, 93]
[F:\〈qq2006〉\QQCustomFace.dll] [N/A, ]
[F:\〈qq2006〉\ImageOle.dll] [TENCENT, 7,0,313,1681]
[F:\〈qq2006〉\QQLiveQMng.dll] [TENCENT, 7,0,313,1681]
[D:\UC talk\UTHook.dll] [2005- 新浪信息技术有限公司, 1, 70, 0, 1]
[F:\〈qq2006〉\GroupConnection.dll] [TENCENT, 7,0,313,1681]
[PID: 2856 / bobo][F:\〈qq2006〉\TIMPlatform.exe] [TENCENT, 7,0,225,1651]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[F:\〈qq2006〉\TIMProxy.dll] [tencent, 0, 3, 2, 4]
[PID: 2424 / bobo][F:\Rav\RsLogVw.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[PID: 3768 / bobo][E:\BitComet\BitComet.exe] [www.BitComet.com, 0.70]
[E:\BitComet\dbghelp.dll] [Microsoft Corporation, 6.3.0011.3 (DbgBuild.040120-1256)]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[f:\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[PID: 2480 / bobo][D:\UC talk\UCtalk.exe] [2005- 新浪信息技术有限公司, 2.0.001]
[D:\UC talk\UTSystem.dll] [2005- 新浪信息技术有限公司, 2, 0, 0, 2]
[D:\UC talk\UTMedia.dll] [新浪信息技术有限公司, 2.00.001]
[D:\UC talk\UTCore.dll] [2005- 新浪信息技术有限公司, 2, 0, 0, 2]
[D:\UC talk\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[D:\UC talk\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[D:\UC talk\UTCtrls.dll] [2005- 新浪信息技术有限公司, 2.00.001]
[D:\UC talk\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0]
[D:\UC talk\UTHook.dll] [2005- 新浪信息技术有限公司, 1, 70, 0, 1]
[D:\UC talk\UCtalkRC.dll] [2005- 新浪信息技术有限公司, 2, 0, 0, 3]
[D:\UC talk\RICHED20.DLL] [Microsoft Corporation, 5.30.23.1205]
[D:\UC talk\UTBugCatch.dll] [北京新浪信息技术有限公司, 1, 2, 8, 0]
[D:\UC talk\dbghelp.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\UC talk\UCSocket.DLL] [北京新浪信息技术有限公司, 1, 1, 21, 0]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[D:\UC talk\UTAudio.DLL] [Beijing Sina Information Technology Co.,Ltd, 3, 4, 0, 3]
[f:\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[D:\UC talk\UCACodec2.dll] [Bejing Sina Information Technology Co.,Ltd , 1.0.0]
[PID: 2692 / bobo][D:\【魔兽世界】\WoW.exe] [Blizzard Entertainment, 2, 1, 2, 6803]
[D:\【魔兽世界】\fmod.dll] [Firelight Technologies Pty, Ltd, 3.75]
[D:\【魔兽世界】\DivxDecoder.dll] [N/A, ]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[D:\UC talk\UTHook.dll] [2005- 新浪信息技术有限公司, 1, 70, 0, 1]
[PID: 3056 / bobo][D:\【魔兽世界】\WoW.exe] [Blizzard Entertainment, 2, 1, 2, 6803]
[D:\【魔兽世界】\fmod.dll] [Firelight Technologies Pty, Ltd, 3.75]
[D:\【魔兽世界】\DivxDecoder.dll] [N/A, ]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[D:\UC talk\UTHook.dll] [2005- 新浪信息技术有限公司, 1, 70, 0, 1]
[PID: 860 / bobo][C:\Documents and Settings\bobo\桌面\所有快捷方式\毒\sreng2\SREngPS.EXE] [Smallfrogs Studio, 2.5.16.900]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[C:\Documents and Settings\bobo\桌面\所有快捷方式\毒\sreng2\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15]
[C:\Documents and Settings\bobo\桌面\所有快捷方式\毒\sreng2\Plugins\NTFSTREAM.SRE] [Smallfrogs Studio, 1, 0, 0, 5]
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1 localhost
==================================
进程特权扫描
特殊特权被允许： SeLoadDriverPrivilege [PID = 1200, F:\RAV\RAVTASK.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1252, F:\RAV\RAVMON.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1104, C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1196, C:\PROGRAM FILES\NOKIA\NOKIA PC SUITE 6\LAUNCHAPPLICATION.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1316, C:\PROGRAM FILES\COMMON FILES\PCSUITE\DATALAYER\DATALAYER.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2188, C:\PROGRA~1\COMMON~1\PCSUITE\SERVICES\SERVIC~1.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1616, F:\MAXTHON2\MAXTHON.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2856, F:\〈QQ2006〉\TIMPLATFORM.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2424, F:\RAV\RSLOGVW.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3768, E:\BITCOMET\BITCOMET.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2480, D:\UC TALK\UCTALK.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2692, D:\【魔兽世界】\WOW.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3056, D:\【魔兽世界】\WOW.EXE]
==================================
API HOOK
N/A
==================================
隐藏进程
N/A
==================================
[/CODE]
