==================================
浏览器加载项
[FlashGet]
{D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\flashget.exe, Amaze Soft>
[&Google]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar3.dll, N/A>
[MMCPlayer Class]
{05C1004E-2596-48E5-8E26-39362985EEB9} <C:\WINNT\Downloaded Program Files\MMCShell.dll, Sohu.com Inc.>
[Shockwave ActiveX Control]
{166B1BCA-3F9C-11CF-8075-444553540000} <C:\WINNT\system32\macromed\Shockwave 10\Download.dll, Adobe Systems, Inc.>
[UploadListView Class]
{474F00F5-3853-492C-AC3A-476512BBC336} <C:\WINNT\Downloaded Program Files\UploaderX.dll, >
[CEditCtrl
Object]
{488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\WINNT\system32\aliedit\AliEdit.dll, www.alipay.com>
[AxInputControl Class]
{73E4740C-08EB-4133-896B-8D0A7C9EE3CD} <C:\WINNT\DOWNLO~1\INPUTC~1.DLL, >
[163Uploader Control]
{8686F2A6-DC01-4E8F-BDE3-DCC7DBBAD6AE} <C:\WINNT\system32\163UPL~1.OCX, 广州网易互动娱乐有限公司>
[photo_uploader Control]
{A984ED9F-E8DA-44E5-BC18-C14B9ABEF79D} <C:\WINNT\DOWNLO~1\CONFLICT.1\PHOTO_~1.OCX, N/A>
[PicUploadCtrl Class]
{BF8C499A-AC6E-4F58-82EA-9E5FCC41C34B} <C:\WINNT\Downloaded Program Files\PicUpload.dll, Sohu.com Inc.>
[Shockwave Flash
Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINNT\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[CPasswordEditCtrl
Object]
{E787FD25-8D7C-4693-AE67-9406BC6E22DF} <C:\WINNT\system32\qqedit\qqedit.dll, 腾讯科技（深圳）有限公司>
[上传到QQ网络硬盘]
<C:\Program Files\Tencent\QQ\AddToNetDisk.htm, N/A>
[使用网际快车下载]
<C:\Program Files\FlashGet\jc_link.htm, N/A>
[使用网际快车下载全部链接]
<C:\Program Files\FlashGet\jc_all.htm, N/A>
[添加到QQ自定义面板]
<C:\Program Files\Tencent\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
<C:\Program Files\Tencent\QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<C:\Program Files\Tencent\QQ\SendMMS.htm, N/A>
==================================
正在运行的进程
[PID: 144][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.00.2195.6601]
[PID: 172][\??\C:\WINNT\system32\csrss.exe] [Microsoft Corporation, 5.00.2195.6601]
[PID: 192][\??\C:\WINNT\system32\winlogon.exe] [Microsoft Corporation, 5.00.2195.6714]
[PID: 220][C:\WINNT\system32\services.exe] [Microsoft Corporation, 5.00.2195.6700]
[C:\WINNT\system32\dmserver.dll] [VERITAS Software Corp., 2195.6605.297.3]
[PID: 232][C:\WINNT\system32\lsass.exe] [Microsoft Corporation, 5.00.2195.6695]
[PID: 412][C:\WINNT\system32\svchost.exe] [Microsoft Corporation, 5.00.2134.1]
[C:\Program Files\Internet Explorer\PLUGINS\system3.sys] [N/A, N/A]
[PID: 464][C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe] [N/A, N/A]
[PID: 480][C:\WINNT\system32\svchost.exe] [Microsoft Corporation, 5.00.2134.1]
[PID: 608][C:\WINNT\system32\nvsvc32.exe] [NVIDIA Corporation, 6.14.10.4465]
[PID: 640][C:\WINNT\system32\regsvc.exe] [Microsoft Corporation, 5.00.2195.6701]
[PID: 656][C:\WINNT\system32\MSTask.exe] [Microsoft Corporation, 4.71.2195.6704]
[PID: 700][C:\WINNT\System32\WBEM\WinMgmt.exe] [Microsoft Corporation, 1.50.1085.0100]
[PID: 932][C:\Program Files\VIAudioi\SBADeck\ADeck.exe] [VIA Technologies, Inc., 6, 3, 2, 0]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\ad11.jpg] [N/A, N/A]
[C:\WINNT\system32\1.dLL] [N/A, N/A]
[C:\Program Files\Internet Explorer\PLUGINS\system3.sys] [N/A, N/A]
[PID: 940][C:\WINNT\system32\internat.exe] [Microsoft Corporation, 5.00.2920.0000]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\ad11.jpg] [N/A, N/A]
[C:\WINNT\system32\1.dLL] [N/A, N/A]
[C:\Program Files\Internet Explorer\PLUGINS\system3.sys] [N/A, N/A]
[PID: 268][C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe] [Zone Labs, LLC, 6.1.737.000]
[C:\WINNT\system32\VSUTIL.dll] [Zone Labs, LLC, 6.1.737.000]
[C:\WINNT\system32\VSINIT.dll] [Zone Labs, LLC, 6.1.737.000]
[C:\WINNT\system32\VSPUBAPI.dll] [Zone Labs, LLC, 6.1.737.000]
[C:\Program Files\Zone Labs\ZoneAlarm\framewrk.dll] [Zone Labs, LLC, 6.1.737.000]
[C:\WINNT\system32\vsdata.dll] [Zone Labs, LLC, 6.1.737.000]
[C:\Program Files\Zone Labs\ZoneAlarm\zlclient_Loc0804.dll] [Zone Labs, LLC, 6.1.737.000]
[C:\Program Files\Zone Labs\ZoneAlarm\framewrk_Loc0804.dll] [Zone Labs, LLC, 6.1.737.000]
[C:\WINNT\system32\vsmonapi.dll] [Zone Labs, LLC, 6.1.737.000]
[C:\WINNT\system32\zlcomm.dll] [Zone Labs, LLC, 6.1.737.000]
[C:\WINNT\system32\ZLCommDB.dll] [Zone Labs, LLC, 6.1.737.000]
[C:\WINNT\system32\vsxml.dll] [Zone Labs, LLC, 6.1.737.000]
[C:\Program Files\Zone Labs\ZoneAlarm\programs.zap] [Zone Labs, LLC, 6.1.737.000]
[C:\Program Files\Zone Labs\ZoneAlarm\programs_Loc0804.zap] [Zone Labs, LLC, 6.1.737.000]
[C:\Program Files\Zone Labs\ZoneAlarm\security.zap] [Zone Labs, LLC, 6.1.737.000]
[C:\Program Files\Zone Labs\ZoneAlarm\security_Loc0804.zap] [Zone Labs Inc., 6.1.737.000]
[C:\Program Files\Zone Labs\ZoneAlarm\alert.zap] [Zone Labs, LLC, 6.1.737.000]
[C:\Program Files\Zone Labs\ZoneAlarm\alert_Loc0804.zap] [Zone Labs, LLC, 6.1.737.000]
[C:\Program Files\Zone Labs\ZoneAlarm\email.zap] [Zone Labs, LLC, 6.1.737.000]
[C:\Program Files\Zone Labs\ZoneAlarm\email_Loc0804.zap] [Zone Labs, LLC, 6.1.737.000]
[C:\Program Files\Zone Labs\ZoneAlarm\firewall.zap] [Zone Labs, LLC, 6.1.737.000]
[C:\Program Files\Zone Labs\ZoneAlarm\firewall_Loc0804.zap] [Zone Labs, LLC, 6.1.737.000]
[C:\Program Files\Zone Labs\ZoneAlarm\filter.zap] [Zone Labs, LLC, 6.1.737.000]
[C:\Program Files\Zone Labs\ZoneAlarm\filter_Loc0804.zap] [Zone Labs, LLC, 6.1.737.000]
[C:\Program Files\Zone Labs\ZoneAlarm\privacy.zap] [Zone Labs, LLC, 6.1.737.000]
[C:\Program Files\Zone Labs\ZoneAlarm\privacy_Loc0804.zap] [Zone Labs, LLC, 6.1.737.000]
[C:\Program Files\Zone Labs\ZoneAlarm\idlock.zap] [Zone Labs, LLC, 6.1.737.000]
[C:\Program Files\Zone Labs\ZoneAlarm\idlock_Loc0804.zap] [Zone Labs, LLC, 6.1.737.000]
[C:\WINNT\system32\ZoneLabs\camupd.dll] [Zone Labs, LLC, 6.1.737.000]
[C:\Program Files\Zone Labs\ZoneAlarm\cam.zap] [Zone Labs, LLC, 6.1.737.000]
[C:\Program Files\Zone Labs\ZoneAlarm\cam_Loc0804.zap] [Zone Labs, LLC, 6.1.737.000]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\ad11.jpg] [N/A, N/A]
[C:\WINNT\system32\1.dLL] [N/A, N/A]
[C:\Program Files\Internet Explorer\PLUGINS\system3.sys] [N/A, N/A]
[PID: 768][C:\WINNT\system32\ZoneLabs\vsmon.exe] [Zone Labs, LLC, 6.1.737.000]
[C:\WINNT\system32\VSDATA.dll] [Zone Labs, LLC, 6.1.737.000]
[C:\WINNT\system32\VSINIT.dll] [Zone Labs, LLC, 6.1.737.000]
[C:\WINNT\system32\VSUTIL.dll] [Zone Labs, LLC, 6.1.737.000]
[C:\WINNT\system32\ZoneLabs\SSLEAY32.dll] [Zone Labs, LLC, 6.1.737.000]
[C:\WINNT\system32\ZoneLabs\vsmon_Loc0804.dll] [Zone Labs, LLC, 6.1.737.000]
[C:\WINNT\system32\vsxml.dll] [Zone Labs, LLC, 6.1.737.000]
[C:\WINNT\system32\zlcomm.dll] [Zone Labs, LLC, 6.1.737.000]
[C:\WINNT\system32\ZLCommDB.dll] [Zone Labs, LLC, 6.1.737.000]
[C:\WINNT\system32\ZoneLabs\vsdb.dll] [Zone Labs, LLC, 6.1.737.000]
[C:\WINNT\system32\ZoneLabs\VSRULEDB.DLL] [Zone Labs, LLC, 6.1.737.000]
[C:\WINNT\system32\ZoneLabs\VSRULEDB_Loc0804.dll] [Zone Labs, LLC, 6.1.737.000]
[C:\WINNT\system32\ZoneLabs\vsvault.dll] [Zone Labs, LLC, 6.1.737.000]
[C:\WINNT\system32\ZoneLabs\zlquarantine.dll] [Zone Labs, LLC, 6.1.737.000]
[C:\WINNT\system32\ZoneLabs\qrbase.dll] [Zone Labs, LLC, 4, 0, 9, 7]
[C:\WINNT\system32\ZoneLabs\scheduler.dll] [Zone Labs, LLC, 6.1.737.000]
[C:\WINNT\system32\ZoneLabs\zlsre.dll] [Zone Labs, LLC, 6.1.737.000]
[C:\WINNT\system32\ZoneLabs\srescan.dll] [Zone Labs, LLC, 4, 0, 9, 7]
[C:\WINNT\system32\ZoneLabs\qrsrecl.dll] [Zone Labs, LLC, 4, 0, 9, 7]
[C:\WINNT\system32\ZoneLabs\camupd.dll] [Zone Labs, LLC, 6.1.737.000]
[C:\WINNT\system32\ZoneLabs\vsavpro.dll] [Zone Labs, LLC, 6.1.737.000]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\ad11.jpg] [N/A, N/A]
[C:\Program Files\Internet Explorer\PLUGINS\system3.sys] [N/A, N/A]
[C:\WINNT\system32\1.dLL] [N/A, N/A]
[PID: 1448][C:\WINNT\system32\conime.exe] [Microsoft Corporation, 5.00.2195.6655]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\ad11.jpg] [N/A, N/A]
[C:\Program Files\Internet Explorer\PLUGINS\system3.sys] [N/A, N/A]
[C:\WINNT\system32\1.dLL] [N/A, N/A]
[PID: 1128][C:\WINNT\explorer.exe] [Microsoft Corporation, 5.00.3700.6690]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\ad11.jpg] [N/A, N/A]
[C:\Program Files\Internet Explorer\PLUGINS\system3.sys] [N/A, N/A]
[C:\WINNT\system32\1.dLL] [N/A, N/A]
[PID: 1236][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2800.1106]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\ad11.jpg] [N/A, N/A]
[C:\Program Files\Internet Explorer\PLUGINS\system3.sys] [N/A, N/A]
[C:\WINNT\system32\1.dLL] [N/A, N/A]
[C:\WINNT\system32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,16,0]
[C:\WINNT\system32\UNISPIM5.IME] [北京紫光华宇软件股份有限公司, 5.0.0.5076]
[PID: 448][C:\Documents and Settings\Administrator\桌面\sreng2\SREng\SREng.exe] [Smallfrogs Studio, 2.2.6.605]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\ad11.jpg] [N/A, N/A]
[C:\Program Files\Internet Explorer\PLUGINS\system3.sys] [N/A, N/A]
[C:\WINNT\system32\1.dLL] [N/A, N/A]
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINNT\hh.exe" %1]
.HLP OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
N/A
==================================
