正在运行的进程
[PID: 440][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 596][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 620][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\KB75976M.LOG] [N/A, ]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 1536][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\KB75976M.LOG] [N/A, ]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\System32\igfxpph.dll] [Intel Corporation, 3,0,0,1992]
[C:\WINDOWS\System32\hccutils.DLL] [Intel Corporation, 3,0,0,1992]
[C:\WINDOWS\system32\igfxres.dll] [Intel Corporation, 3,0,0,1992]
[C:\WINDOWS\System32\igfxsrvc.dll] [Intel Corporation, 3,0,0,1992]
[C:\WINDOWS\System32\igfxdev.dll] [Intel Corporation, 3,0,0,1992]
[C:\DOCUME~1\TEMP\LOCALS~1\Temp\upxdnd.dll] [N/A, ]
[C:\WINDOWS\system32\cmdbcs.dll] [N/A, ]
[C:\KAV2005\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233]
[C:\KAV2005\KMailOEBand.dll] [Kingsoft Corporation, 2006, 12, 1, 139]
[C:\KAV2005\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\KAV2005\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\JPWB.IME] [常诚研制, 4.00.950]
[C:\KAV2005\KAScript.DLL] [Kingsoft Corporation, 2006, 12, 11, 72]
[C:\KAV2005\KAEPlat.DLL] [Kingsoft Corp., 2006, 8, 29, 60]
[C:\KAV2005\KAEMem.DAT] [Kingsoft, 2006, 9, 25, 16]
[C:\KAV2005\KAEUnpack.DAT] [Kingsoft Corp., 2007, 3, 12, 114]
[D:\WINZIP\WZSHLSTB.DLL] [WinZip Computing, Inc., 4.1 (32-bit)]
[d:\WinRAR\rarext.dll] [N/A, ]
[PID: 272][C:\KAV2005\KPFW32.EXE] [Kingsoft Corporation, 2007, 2, 2, 687]
[C:\KAV2005\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0]
[C:\KAV2005\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\KAV2005\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\KB75976M.LOG] [N/A, ]
[C:\KAV2005\MFC71CHS.DLL] [Microsoft Corporation, 7.10.3077.0]
[C:\KAV2005\KAVIPC2.DLL] [Kingsoft Corporation, 2004, 12, 28, 20]
[C:\KAV2005\KAConfig.DLL] [Kingsoft Corporation, 2007, 1, 11, 41]
[C:\KAV2005\FiltList.dll] [N/A, ]
[C:\KAV2005\KAVPassp.DLL] [Kingsoft Corporation, 2006, 9, 7, 270]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[C:\KAV2005\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233]
[C:\WINDOWS\system32\cmdbcs.dll] [N/A, ]
[C:\KAV2005\KMailOEBand.dll] [Kingsoft Corporation, 2006, 12, 1, 139]
[PID: 2920][C:\program files\Internet Explorer\IEXPLORE.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\KB75976M.LOG] [N/A, ]
[C:\KAV2005\KAVAFish.DLL] [Kingsoft Corporation, 2006, 10, 25, 27]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[C:\KAV2005\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233]
[C:\KAV2005\KMailOEBand.dll] [Kingsoft Corporation, 2006, 12, 1, 139]
[C:\KAV2005\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\KAV2005\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\cmdbcs.dll] [N/A, ]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 3160][C:\KAV2005\KMailMon.EXE] [Kingsoft Corporation, 2007, 2, 25, 948]
[C:\WINDOWS\KB75976M.LOG] [N/A, ]
[C:\KAV2005\KAntiSpm.dll] [Kingsoft Corporation, 2007, 2, 25, 129]
[C:\KAV2005\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\KAV2005\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[C:\KAV2005\KAVIPC2.DLL] [Kingsoft Corporation, 2004, 12, 28, 20]
[C:\KAV2005\KAECall2.DLL] [Kingsoft Corporation, 2004, 12, 28, 7]
[C:\KAV2005\KAEPlat.DLL] [Kingsoft Corp., 2006, 8, 29, 60]
[C:\KAV2005\KAEMem.DAT] [Kingsoft, 2006, 9, 25, 16]
[C:\KAV2005\KAEUnpack.DAT] [Kingsoft Corp., 2007, 3, 12, 114]
[C:\KAV2005\KAConfig.DLL] [Kingsoft Corporation, 2007, 1, 11, 41]
[C:\KAV2005\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233]
[C:\KAV2005\KMailOEBand.dll] [Kingsoft Corporation, 2006, 12, 1, 139]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[PID: 3468][C:\KAV2005\KAVStart.EXE] [Kingsoft Corporation, 2007, 2, 1, 257]
[C:\KAV2005\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0]
[C:\KAV2005\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\KAV2005\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\KB75976M.LOG] [N/A, ]
[C:\KAV2005\MFC71CHS.DLL] [Microsoft Corporation, 7.10.3077.0]
[C:\KAV2005\KMailOEBand.dll] [Kingsoft Corporation, 2006, 12, 1, 139]
[C:\KAV2005\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233]
[C:\KAV2005\KAVIPC2.DLL] [Kingsoft Corporation, 2004, 12, 28, 20]
[C:\KAV2005\SvcTimer.DLL] [Kingsoft Corporation, 2006.12.22.84]
[C:\KAV2005\KAVPassp.dll] [Kingsoft Corporation, 2006, 9, 7, 270]
[C:\KAV2005\PopSprt3.dll] [Kingsoft Corporation, 2007, 1, 16, 45]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[C:\WINDOWS\system32\cmdbcs.dll] [N/A, ]
[PID: 5544][C:\Documents and Settings\TEMP\My Documents\SREng.EXE] [Smallfrogs Studio, 2.4.12.806]
[C:\WINDOWS\KB75976M.LOG] [N/A, ]
[C:\KAV2005\KMailOEBand.dll] [Kingsoft Corporation, 2006, 12, 1, 139]
[C:\KAV2005\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\KAV2005\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[C:\KAV2005\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[C:\WINDOWS\system32\cmdbcs.dll] [N/A, ]
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM Error. ["hh.exe" %1]
.HLP Error. [winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS Error. [超级解霸3000]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1localhost
0.0.0.0
==================================
API HOOK
入口点错误:LoadLibraryExW (危险等级: 一般, 被下面模块所HOOK: C:\KAV2005\KASocket.dll)
==================================
隐藏进程
N/A
==================================
[/CODE]