[D:\qq\QQAddr.dll] [深圳市腾讯计算机系统有限公司, 5, 0, 101, 200]
[C:\DOCUME~1\Williams\LOCALS~1\Temp\Msxo0.dll] [N/A, ]
[C:\DOCUME~1\Williams\LOCALS~1\Temp\LgSy0.dll] [N/A, ]
[C:\DOCUME~1\Williams\LOCALS~1\Temp\Gjzo0.dll] [N/A, ]
[C:\DOCUME~1\Williams\LOCALS~1\Temp\LgSy1.dll] [N/A, ]
[C:\DOCUME~1\Williams\LOCALS~1\Temp\Rav20.dll] [N/A, ]
[C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)]
[D:\qq\QQPhoneHelper.dll] [腾讯科技（深圳）有限公司, 2, 1, 6, 60]
[PID: 1868][D:\qq\TIMPlatform.exe] [tencent, 0, 3, 1, 8]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
[D:\qq\TIMProxy.dll] [tencent, 0, 3, 2, 4]
[PID: 2168][C:\WINDOWS\system32\notepad.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
[PID: 992][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
[D:\1234\MagicSet\haokanbar.dll] [Xiang Feng Technology, 2, 1, 0, 1463]
[D:\qq\QQIEHelper.dll] [深圳市腾讯计算机系统有限公司, 1, 1, 0, 5]
[D:\xunlei\ComDlls\XunLeiBHO_007.dll] [Thunder Networking Technologies,LTD, 5, 0, 1, 4]
[C:\DOCUME~1\Williams\LOCALS~1\Temp\LgSy1.dll] [N/A, ]
[C:\DOCUME~1\Williams\LOCALS~1\Temp\Rav20.dll] [N/A, ]
[C:\DOCUME~1\Williams\LOCALS~1\Temp\Gjzo0.dll] [N/A, ]
[C:\DOCUME~1\Williams\LOCALS~1\Temp\Msxo0.dll] [N/A, ]
[C:\DOCUME~1\Williams\LOCALS~1\Temp\LgSy0.dll] [N/A, ]
[C:\WINDOWS\system32\cmdbcs.dll] [N/A, ]
[D:\Rising\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,16,0]
[PID: 204][D:\qq\QQexternal.exe] [, 1, 0, 0, 1]
[D:\qq\BasicCtrlDll.dll] [Tencent, 5, 0, 200, 160]
[D:\qq\MFC42.DLL] [Microsoft Corporation, 6.00.8665.0]
[D:\qq\QQHelperDll.dll] [, 1, 0, 0, 1]
[D:\qq\QQBaseClassInDll.dll] [, 1, 0, 0, 1]
[C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
[D:\qq\QQRes.dll] [tencent, 1, 0, 0, 1]
[D:\Rising\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,16,0]
[C:\DOCUME~1\Williams\LOCALS~1\Temp\LgSy1.dll] [N/A, ]
[C:\DOCUME~1\Williams\LOCALS~1\Temp\Rav20.dll] [N/A, ]
[C:\DOCUME~1\Williams\LOCALS~1\Temp\Gjzo0.dll] [N/A, ]
[C:\DOCUME~1\Williams\LOCALS~1\Temp\Msxo0.dll] [N/A, ]
[C:\DOCUME~1\Williams\LOCALS~1\Temp\LgSy0.dll] [N/A, ]
[C:\WINDOWS\system32\cmdbcs.dll] [N/A, ]
[PID: 3036][D:\System Repair Engineer\SREng.EXE] [Smallfrogs Studio, 2.4.12.806]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
[C:\DOCUME~1\Williams\LOCALS~1\Temp\LgSy1.dll] [N/A, ]
[C:\DOCUME~1\Williams\LOCALS~1\Temp\Rav20.dll] [N/A, ]
[C:\DOCUME~1\Williams\LOCALS~1\Temp\Gjzo0.dll] [N/A, ]
[C:\DOCUME~1\Williams\LOCALS~1\Temp\Msxo0.dll] [N/A, ]
[C:\DOCUME~1\Williams\LOCALS~1\Temp\LgSy0.dll] [N/A, ]
[C:\WINDOWS\system32\cmdbcs.dll] [N/A, ]
[PID: 3380][D:\System Repair Engineer\SREng.EXE] [Smallfrogs Studio, 2.4.12.806]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
[C:\DOCUME~1\Williams\LOCALS~1\Temp\LgSy1.dll] [N/A, ]
[C:\DOCUME~1\Williams\LOCALS~1\Temp\Rav20.dll] [N/A, ]
[C:\DOCUME~1\Williams\LOCALS~1\Temp\Gjzo0.dll] [N/A, ]
[C:\DOCUME~1\Williams\LOCALS~1\Temp\Msxo0.dll] [N/A, ]
[C:\DOCUME~1\Williams\LOCALS~1\Temp\LgSy0.dll] [N/A, ]
[C:\WINDOWS\system32\cmdbcs.dll] [N/A, ]
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1 localhost
127.0.0.1 mmm.caifu18.net
127.0.0.1 www.18dmm.com
127.0.0.1 d.qbbd.com
127.0.0.1 www.5117music.com
127.0.0.1 www.union123.com
127.0.0.1 www.wu7x.cn
127.0.0.1 www.54699.com
127.0.0.1 60.169.0.66
127.0.0.1 60.169.1.29
127.0.0.1 www.97725.com
127.0.0.1 down.97725.com
127.0.0.1 ip.315hack.com
127.0.0.1 ip.54liumang.com
127.0.0.1 www.41ip.com
127.0.0.1 xulao.com
127.0.0.1 www.heixiou.com
127.0.0.1 www.9cyy.com
127.0.0.1 www.hunll.com
127.0.0.1 www.down.hunll.com
127.0.0.1 do.77276.com
127.0.0.1 www.baidulink.com
127.0.0.1 adnx.yygou.cn
127.0.0.1 222.73.220.45
127.0.0.1 www.f5game.com
127.0.0.1 www.guazhan.cn
127.0.0.1 wm,103715.com
127.0.0.1 www.my6688.cn
127.0.0.1 i.96981.com
127.0.0.1 d.77276.com
127.0.0.1 www1.cw988.cn
127.0.0.1 cool.47555.com
127.0.0.1 www.asdwc.com
127.0.0.1 55880.cn
==================================
API HOOK
N/A
==================================
隐藏进程
N/A
==================================
