电脑维修论坛 » 病毒木马黑客 » 网站一打开就是这样子

打印

网站一打开就是这样子

jisbn

维修工人

Rank: 2

UID: 39029
帖子: 32
精华: 0
经验: 46 点
威望: 0 点
维修币: -3 ￥
魅力: 0
阅读权限: 10

1^# 大中小发表于 2008-6-25 15:33 只看该作者

网站一打开就是这样子

我打开网站有的一打开就是这样子，有些网站可以打开的，但多数是如下

附件: 您所在的用户组无法下载或查看附件

TOP

baug1985

高级工程师

Rank: 5 Rank: 5

UID: 38411
帖子: 322
精华: 0
经验: 182 点
威望: 159 点
维修币: 758 ￥
魅力: 320
阅读权限: 40

2^# 大中小发表于 2008-6-25 16:06 只看该作者

你早说情况啊.中毒了.很深.用专杀吧.用U盘去别的电脑上拷.病毒名未知.去网上搜吧.

不行就全格.重装是王道```````

TOP

shoo

超级版主

Rank: 8 Rank: 8

UID: 33692
帖子: 1438
精华: 4
经验: 11520 点
威望: 864 点
维修币: 21019 ￥
魅力: 3336
阅读权限: 250

3^# 大中小发表于 2008-6-25 17:24 只看该作者

用这里http://bbs.dnwx.com/thread-34636-1-1.html的第3、4、5个工具清理系统，再用超级兔子修复IE看看，如果还是不行，就用置顶帖里的SREng扫个日志上来，我帮你看下

有中病毒症状的进...（附SREng简要用法）

[原创]流行病*毒专杀以及一些系统优化小工具

如果有电脑维护、病毒清理、论坛管理方面的问题，都可以发消息给我：）

TOP

shoo

超级版主

Rank: 8 Rank: 8

UID: 33692
帖子: 1438
精华: 4
经验: 11520 点
威望: 864 点
维修币: 21019 ￥
魅力: 3336
阅读权限: 250

4^# 大中小发表于 2008-6-25 19:52 只看该作者

以后有问题把日志跟在自己的帖子后面，这次我帮你贴出来了

复制内容到剪贴板

代码:

2008-06-25,19:14:46



System Repair Engineer 2.6.10.990

Smallfrogs (http://www.KZTechs.com)



Windows XP Professional Service Pack 3 (Build 2600) - 管理权限用户 - 完整功能



以下内容被选中：

    所有的启动项目（包括注册表、启动文件夹、服务等）

    浏览器加载项

    正在运行的进程（包括进程模块信息）

    文件关联

    Winsock 提供者

    Autorun.inf

    HOSTS 文件

    进程特权扫描





启动项目

注册表

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Component Publisher]

    <OlympicExpress><"C:\Program Files\SogouInput\OlympicNews.exe">  [(Verified)Sogou.com]

[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]

    <load><>  [N/A]

    <run><>  [N/A]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

    <NeroFilterCheck><C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe>  [(Verified)Nero AG]

    <SecurDisc><C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe>  [(Verified)Nero AG]

    <InCD><C:\Program Files\Nero\Nero 7\InCD\InCD.exe>  [(Verified)Nero AG]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]

    <shell><Explorer.exe>  [(Verified)Microsoft Windows Component Publisher]

    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Windows Component Publisher]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]

    <AppInit_DLLs><>  [N/A]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]

    <UIHost><logonui.exe>  [(Verified)Microsoft Windows Component Publisher]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]

    <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE>  [File is missing]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]

    <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [File is missing]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]

    <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [File is missing]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]

    <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [File is missing]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]

    <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Remove.PerUser.NT>  [(Verified)Microsoft Windows Component Publisher]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]

    <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser>  [(Verified)Microsoft Windows Component Publisher]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]

    <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [File is missing]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Your Image File Name Here without a path]

    <IFEO[Your Image File Name Here without a path]><ntsd -d>  [N/A]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    <RfwMain><; "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup>  [(Verified)BEIJING RISING SCIENCE AND TECHNOLOGY CORPORATION LIMITED]

    <WebThunder><; d:\Program Files\Thunder Network\WebThunder\WebThunder.exe>  [(Verified)ShenZhen Thunder Networking Technologies Ltd.]



==================================

启动文件夹

N/A



==================================

服务

[Contrl Center of Storm Media / ccosm][Running/Auto Start]

  <C:\Program Files\StormII\stormliv.exe /asservice><北京暴风网际科技有限公司>

[Help and Support / helpsvc][Stopped/Disabled]

  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll><N/A>

[HID Input Service / HidServ][Stopped/Auto Start]

  <\SystemRoot\C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>

[InCD Helper / InCDsrv][Running/Auto Start]

  <C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe><Nero AG>

[NetMeeting Remote Desktop Sharing / mnmsrvc][Stopped/Manual Start]

  <><(File is missing)>

[NBService / NBService][Stopped/Manual Start]

  <C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe><Nero AG>

[NMIndexingService / NMIndexingService][Stopped/Manual Start]

  <"C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe"><Nero AG>

[Rising Proxy  Service / RfwProxySrv][Running/Auto Start]

  <C:\Program Files\Rising\Rfw\rfwProxy.exe><Beijing Rising Technology Co., Ltd.>

[Rising Personal Firewall Service / RfwService][Running/Auto Start]

  <C:\Program Files\Rising\Rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.>



==================================

驱动程序

[2310_00 / 2310_00][Stopped/Boot Start]

  <\SystemRoot\system32\DRIVERS\2310_00.sys><HighPoint Technologies, Inc.>

[3wareDrv / 3wareDrv][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\3wareDrv.sys><N/A>

[3waregsm / 3waregsm][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\3waregsm.sys><N/A>

[a320raid / a320raid][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\a320raid.sys><Adaptec, Inc.>

[aaatimeo / aaatimeo][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\aaatimeo.sys><Microsoft Corporation>

[Adaptec RAID Miniport Driver / aac][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\aac.sys><Adaptec, Inc.>

[Adaptec SAS/SATA-II RAID Miniport Driver / aacsas][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\aacsas.sys><Adaptec, Inc.>

[aar1210 / aar1210][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\aar1210.sys><Adaptec, Inc.>

[adp94xx / adp94xx][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\adp94xx.sys><Adaptec, Inc.>

[adpu160m / adpu160m][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\adpu160m.sys><Adaptec, Inc.>

[adpu320 / adpu320][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\adpu320.sys><Adaptec, Inc.>

[ACARD AEC6210UF UltraDMA33 Controller / aec6210][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\aec6210.sys><ACARD Technology Corp.>

[ACARD AEC6260 UltraDMA-66 Controller / aec6260][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\aec6260.sys><ACARD Technology Corp.>

[aec6280 / aec6280][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\aec6280.sys><ACARD Technology Corp.>

[aec6290 / aec6290][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\aec6280.sys><ACARD Technology Corp.>

[aec67160 / aec67160][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\aec67160.sys><ACARD Technology Corp.>

[AEC671X / AEC671X][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\AEC671X.sys><ACARD Technology Corp.>

[AEC6880 / AEC6880][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\AEC6880.sys><ACARD Technology Corp.>

[aec6897 / aec6897][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\aec6897.sys><ACARD Technology Corp.>

[aec68x5 / aec68x5][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\aec68x5.sys><ACARD Technology Corp.>

[AFAMgt / AFAMgt][Running/Boot Start]

  <\SystemRoot\system32\DRIVERS\afamgt.sys><Adaptec, Inc.>

[ahcix86 / ahcix86][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\ahcix86.sys><ATI Technologies Inc.>

[Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start]

  <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>

[AliIde / AliIde][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\aliide.sys><ALi Corporation>

[AMD AGP Bus Filter Driver / amdagp][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\amdagp.sys><Advanced Micro Devices, Inc.>

[amdbusdr / amdbusdr][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\amdbusdr.sys><AMD>

[AMD EIDE 驱动程衼E / amdeide][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\AmdEide.sys><AMD>

[arcm_x86 / arcm_x86][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\arcm_x86.sys><ARECA Technology Corporation>

[asc / asc][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\asc.sys><Advanced System Products, Inc.>

[asc3550 / asc3550][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\asc3550.sys><Advanced System Products, Inc.>

[SiI-3112 SATALink  Controller / ASH1205][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\ASH1205.sys><Silicon Image, Inc.>

[ata1200a / ata1200a][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\ata1200a.sys><Adaptec, Inc.>

[atiide / atiide][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\atiide.sys><ATI Technologies Inc.>

[Promise driver accelerator / bb-run][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\bb-run.sys><Promise Technology, Inc.>

[cda1000 / cda1000][Stopped/Boot Start]

  <\SystemRoot\system32\DRIVERS\cda1000.sys><Adaptec, Inc.>

[DELL CERC SATA 1.5/6ch RAID Miniport Driver / cercsr6][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\cercsr6.sys><Adaptec, Inc.>

[CmdIde / CmdIde][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\cmdide.sys><CMD Technology, Inc.>

[Cpq32fs2 / Cpq32fs2][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\Cpq32fs2.sys><Hewlett-Packard Company>

[cpqarry2 / cpqarry2][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\cpqarry2.sys><Compaq Computer Corporation>

[cpqcissm / cpqcissm][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\cpqcissm.sys><Hewlett-Packard Company>

[dac2w2k / dac2w2k][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\dac2w2k.sys><Mylex Corporation>

[dac960nt / dac960nt][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\dac960nt.sys><Mylex Corporation>

[Promise Removable Disk Control Driver / dontgo][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\DontGo.sys><Promise Technology, Inc.>

[dpti2o / dpti2o][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\dpti2o.sys><Adaptec, Inc.>

[FastSx / FastSx][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\FastSx.sys><Promise Technology, Inc.>

[fasttrak / fasttrak][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\fasttrak.sys><Promise Technology, Inc.>

[fasttx2k / fasttx2k][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\fasttx2k.sys><Promise Technology, Inc.>

[fttxr52P / fttxr52P][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\fttxr52P.sys><Promise Technology, Inc.>

[Microsoft 用于 High Definition Audio 的 UAA 总线驱动程序 / HDAudBus][Stopped/Manual Start]

  <system32\DRIVERS\HDAudBus.sys><Windows (R) Server 2003 DDK provider>

[HookUrl / HookUrl][Running/Auto Start]

  <\??\C:\Program Files\Rising\Rfw\HookUrl.sys><Beijing Rising Technology Co., Ltd.>

[HpCISSm2 / HpCISSm2][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\HpCISSm2.sys><Hewlett-Packard Company>

[Hpt366 / Hpt366][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\Hpt366.sys><Microsoft Corporation>

[hpt374 / hpt374][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\hpt374.sys><HighPoint Technologies, Inc.>

[hpt3xx / hpt3xx][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\hpt3xx.sys><HighPoint Technologies, Inc.>

[hptmv / hptmv][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\hptmv.sys><HighPoint Technologies, Inc.>

[hptmv6 / hptmv6][Stopped/Boot Start]

  <\SystemRoot\system32\DRIVERS\hptmv6.sys><HighPoint Technologies, Inc.>

[hptpro / hptpro][Stopped/Boot Start]

  <\SystemRoot\system32\DRIVERS\hptpro.sys><HighPoint Technologies, Inc.>

[Intel RAID Controller / iaStor][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\iaStor.sys><Intel Corporation>

[Intel  RAID Controller / iaStor55][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\iaStor55.sys><Intel Corporation>

[Intel RAID  Controller / iaStor70][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\iaStor70.sys><Intel Corporation>

[InCD File System / InCDfs][Running/Disabled]

  <system32\drivers\InCDFs.sys><Nero AG>

[InCDPass / InCDPass][Running/System Start]

  <system32\drivers\InCDPass.sys><Nero AG>

[InCD Reader / incdrm][Running/System Start]

  <system32\drivers\InCDRm.sys><Nero AG>

[IBM ServeRAID Device Driver / ipsraidn][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\ipsraidn.sys><IBM Corporation>

[ISO CD-ROM Device Driver / ISODrive][Running/System Start]

  <\??\C:\Program Files\UltraISO\drivers\ISODrive.sys><EZB Systems, Inc.>

[ITERAID_Service_Install / iteraid][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\iteraid.sys><Integrated Technology Express, Inc.>

[JRAID / JRAID][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\jraid.sys><JMicron Technology Corp.>

[m5228 / m5228][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\m5228.sys><ALi Corporation.>

[m5281 / m5281][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\m5281.sys><ALi Corporation>

[m5287 / m5287][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\m5287.sys><ULi Electronics Inc.>

[m5288 / m5288][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\m5288.sys><ULi Electronics Inc.>

[m5289 / m5289][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\m5289.sys><ULi Electronics Inc.>

[MegaIDE / MegaIDE][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\MegaIDE.sys><LSI Logic Corporation.>

[mraid35x / mraid35x][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\mraid35x.sys><American Megatrends Inc.>

[mv614x / mv614x][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\mv614x.sys><N/A>

[mv61xx / mv61xx][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\mv61xx.sys><Marvell Semiconductor, Inc.>

[mvSata / mvSata][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\mvsata.sys><Marvell Semiconductors Inc.>

[IBM ServeRAID 4M/4L/4Mx/4Lx/5i/6M/6i/7k Device Driver / nfrd960][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\nfrd960.sys><IBM Corporation>

[nv / nv][Running/Manual Start]

  <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>

[nvatabus / nvatabus][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\nvatabus.sys><NVIDIA Corporation>

[nvgts / nvgts][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\nvgts.sys><NVIDIA Corporation>

[NVIDIA nForce(tm) RAID Class Driver / nvraid][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\nvraid.sys><NVIDIA Corporation>

[NVIDIA nForce RAID Driver / nvrd32][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\nvrd32.sys><NVIDIA Corporation>

[CMD IDE Raid Controller / Pnp649r][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\pnp649r.sys><CMD Technology, Inc.>

[SiI 680 ATA Controller / Pnp680][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\pnp680.sys><Silicon Image, Inc.>

[Silicon Image SiI 0680 Medley Raid Controller / Pnp680r][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\pnp680r.sys><Silicon Image, Inc>

[Direct Parallel Link Driver / Ptilink][Running/Manual Start]

  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>

[ql1080 / ql1080][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\ql1080.sys><QLogic Corporation>

[ql12160 / ql12160][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\ql12160.sys><QLogic Corporation>

[ql1280 / ql1280][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\ql1280.sys><QLogic Corporation>

[ql2100 / ql2100][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\ql2100.sys><QLogic Corporation>

[ql2200 / ql2200][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\ql2200.sys><QLogic Corporation>

[QLogic Fibre Channel SCSI Miniport Driver (w32 IP) / ql2300][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\ql2300.sys><QLogic Corporation>

[raidsrc / raidsrc][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\raidsrc.sys><Intel>

[Rising  Rfwbase Driver / RfwBase][Running/Auto Start]

  <System32\DRIVERS\rfwbase.SYS><Beijing Rising Technology Co., Ltd.>

[rr172x / rr172x][Stopped/Boot Start]

  <\SystemRoot\system32\DRIVERS\rr172x.sys><HighPoint Technologies, Inc.>

[rr174x / rr174x][Stopped/Boot Start]

  <\SystemRoot\system32\DRIVERS\rr174x.sys><HighPoint Technologies, Inc.>

[rr232x / rr232x][Stopped/Boot Start]

  <\SystemRoot\system32\DRIVERS\rr232x.sys><HighPoint Technologies, Inc.>

[rr2340 / rr2340][Stopped/Boot Start]

  <\SystemRoot\system32\DRIVERS\rr2340.sys><HighPoint Technologies, Inc.>

[RsFwDrv / RsFwDrv][Running/System Start]

  <\??\C:\Program Files\Rising\Rfw\RsFwDrv.sys><Beijing Rising Technology Co., Ltd.>

[Realtek 10/100/1000 PCI NIC Family NDIS XP Driver / RTL8023xp][Running/Manual Start]

  <system32\DRIVERS\Rtnicxp.sys><Realtek Semiconductor Corporation>

[Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Stopped/Manual Start]

  <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>

[S150sx8 / S150sx8][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\S150sx8.sys><Promise Technology, Inc.>

[Secdrv / Secdrv][Stopped/Manual Start]

  <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>

[SiI-3512 SATALink Controller / SI3112][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\SI3112.sys><Silicon Image, Inc.>

[ATI-437A Serial ATA Controller / SI3112r][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\SI3112r.sys><Silicon Image, Inc>

[SiI-3114 SATALink Controller / SI3114][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\SI3114.sys><Silicon Image, Inc.>

[SiI-3114 SATARaid Controller / SI3114r][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\SI3114R.sys><Silicon Image, Inc>

[SiI-3114 SoftRaid 5 Controller / Si3114r5][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\Si3114r5.sys><Silicon Image, Inc>

[SiI-3124 SATALink Controller / SI3124][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\SI3124.sys><Silicon Image, Inc.>

[SiI-3124 SATARaid Controller / SI3124r][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\SI3124R.sys><Silicon Image, Inc>

[SiI-3124 SoftRaid 5 Controller / Si3124r5][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\Si3124r5.sys><Silicon Image, Inc>

[SiI-3132 SATALink Controller / SI3132][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\SI3132.sys><Silicon Image, Inc.>

[SiI-3132 SoftRaid 5 Controller / Si3132r5][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\Si3132r5.sys><Silicon Image, Inc>

[SATALink driver accelerator / SiFilter][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\SiWinAcc.sys><Silicon Image, Inc.>

[SATALink External Device Filter / SiRemFil][Running/Boot Start]

  <\SystemRoot\system32\DRIVERS\SiRemFil.sys><Silicon Image, Inc.>

[SiSide / SiSide][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\siside.sys><Silicon Integrated Systems Corp.>

[SiSRaid4 / SiSRaid4][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\sisraid4.sys><Silicon Integrated Systems>

[sisraidx / sisraidx][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\sisraidx.sys><Silicon Integrated Systems Corp.>

[Sparrow / Sparrow][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\sparrow.sys><Adaptec, Inc.>

[sptrak / sptrak][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\sptrak.sys><Promise Technology, Inc.>

[symc8xx / symc8xx][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\symc8xx.sys><LSI Logic>

[Symmpi / Symmpi][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\symmpi.sys><LSI Logic>

[sym_hi / sym_hi][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\sym_hi.sys><LSI Logic>

[sym_u3 / sym_u3][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\sym_u3.sys><LSI Logic>

[UlSata / UlSata][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\ulsata.sys><Promise Technology, Inc.>

[ulsata2 / ulsata2][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\ulsata2.sys><Promise Technology, Inc.>

[ultra / ultra][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\ultra.sys><Promise Technology, Inc.>

[VIA AGP Filter / viaagp1][Running/Boot Start]

  <\SystemRoot\system32\DRIVERS\viaagp1.sys><VIA Technologies, Inc.>

[viamraid / viamraid][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\viamraid.sys><VIA Technologies inc,.ltd>

[VIA ATA/ATAPI Host Controller / viapdsk][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\viapdsk.sys><VIA Technologies, Inc.>

[ViBus / ViBus][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\ViBus.sys><VIA Technologies, Inc.>

[videX32 / videX32][Running/Boot Start]

  <\SystemRoot\system32\DRIVERS\videX32.sys><VIA Technologies, Inc.>

[VIA SATA IDE Device Driver / ViPrt][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\ViPrt.sys><VIA Technologies, Inc.>

[VMscsi / VMscsi][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\vmscsi.sys><VMware, Inc.>

[VIA SATA IDE Hot-plug Driver / xfilt][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\xfilt.sys><VIA Technologies,Inc>



==================================

浏览器加载项

[百度搜索]

  {6096E38F-5AC1-4391-8EC4-75DFA92FB32F} <http://www.baidu.com/s?wd=&tn=lin7163862_pg, N/A>

[启动WEB迅雷]

  {962EFB8E-2683-42d4-AC74-AAA4C759B9C6} <http://my.xunlei.com, N/A>

[]

  {e2e2dd38-d088-4134-82b7-f2ba38496583} <%windir%\Network Diagnostic\xpnetdiag.exe, N/A>

[WebThunder Browser Helper]

  {00000AAA-A363-466E-BEF5-9BB68697AA7F} <d:\Program Files\Thunder Network\WebThunder\WebThunderBHO_Now.dll, Thunder Networking Technologies,LTD>

[WebThunder Class]

  {03507A1A-E0C5-4404-AA26-205385C0892D} <, N/A>

[HTML Document]

  {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>

[DHTML Edit Control Safe for Scripting for IE5]

  {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, Microsoft Corporation>

[Shell Name Space]

  {55136805-B2DE-11D1-B9F2-00A0C98BC547} <%SystemRoot%\system32\shdocvw.dll, N/A>

[Windows Media Player]

  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>

[Microsoft Web 浏览器]

  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>

[RealPlayer G2 Control]

  {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\Program Files\StormII\Codec\rmoc3260.dll, RealNetworks, Inc.>

[Shockwave Flash Object]

  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx, Adobe Systems, Inc.>

[XPPlayer Class]

  {F3E70CEA-956E-49CC-B444-73AFE593AD7F} <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\pplayer.dll_1_work, Thunder>

[使用WEB迅雷下载]

  <d:\Program Files\Thunder Network\WebThunder\GetUrl.htm, N/A>

[使用WEB迅雷下载全部链接]

  <d:\Program Files\Thunder Network\WebThunder\GetAllUrl.htm, N/A>

[导出到 Microsoft Office Excel(&X)]

  <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>



==================================

正在运行的进程

[PID: 568 / SYSTEM][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]

[PID: 644 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

[PID: 668 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]

[PID: 720 / SYSTEM][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]

    [C:\WINDOWS\AppPatch\AcAdProc.dll]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

[PID: 732 / SYSTEM][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

[PID: 888 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

[PID: 968 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

[PID: 1060 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

[PID: 1116 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

[PID: 1224 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

[PID: 1292 / SYSTEM][C:\Program Files\Rising\Rfw\rfwsrv.exe]  [Beijing Rising Technology Co., Ltd., 7.0.0.73]

    [C:\WINDOWS\system32\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]

    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]

    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]

    [C:\Program Files\Rising\Rfw\ProcCom.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]

    [C:\Program Files\Rising\Rfw\RsCommX2.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]

    [C:\Program Files\Rising\Rfw\RSAPPMGR.dll]  [Beijing Rising Technology Co., Ltd., 20.0.0.0]

    [C:\Program Files\Rising\Rfw\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 20.0.0.18]

    [C:\Program Files\Rising\Rfw\RfwRule.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.13]

    [C:\Program Files\Rising\Rfw\rfwlog.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.12]

    [C:\Program Files\Rising\Rfw\Rfwdrv.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.45]

    [C:\Program Files\Rising\Rfw\ijt_ctrl.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.0]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

    [C:\Program Files\Rising\Rfw\unvdet.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]

    [C:\Program Files\Rising\Rfw\mPorts.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.3]

[PID: 1372 / SYSTEM][C:\Program Files\Rising\Rfw\rfwProxy.exe]  [Beijing Rising Technology Co., Ltd., 7.0.0.34]

    [C:\WINDOWS\system32\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]

    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]

    [C:\Program Files\Rising\Rfw\ProcCom.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]

    [C:\Program Files\Rising\Rfw\RsCommX2.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]

    [C:\Program Files\Rising\Rfw\RfwRule.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.13]

    [C:\Program Files\Rising\Rfw\urlrule.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 9]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

    [C:\Program Files\Rising\Rfw\MonMid.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.4]

[PID: 1576 / SYSTEM][C:\Program Files\Rising\Rfw\rfwstub.exe]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]

    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]

    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]

    [C:\Program Files\Rising\Rfw\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

[PID: 1776 / Administrator][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]

    [C:\Program Files\WinRAR\rarext.dll]  [N/A, ]

    [C:\Program Files\Nero\Nero 7\Nero BackItUp\NBShell.dll]  [Nero AG, 2, 9, 1, 0]

    [C:\Program Files\Nero\Nero 7\Nero BackItUp\MFC71U.DLL]  [Microsoft Corporation, 7.10.3077.0]

    [C:\Program Files\Nero\Nero 7\Nero BackItUp\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]

    [C:\Program Files\Nero\Nero 7\Nero BackItUp\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]

    [C:\Program Files\Nero\Nero 7\InCD\InCDshx.dll]  [Nero AG, 5, 5, 2, 8]

    [C:\Program Files\Nero\Nero 7\InCD\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]

    [C:\Program Files\Nero\Nero 7\InCD\InCDAPI2.dll]  [Nero AG, 5, 5, 2, 8]

    [C:\Program Files\Nero\Nero 7\InCD\NBHApi.dll]  [Nero AG, 5, 5, 2, 8]

    [C:\Program Files\Nero\Nero 7\Nero CoverDesigner\CoverEdExtension.dll]  [Nero AG, 2, 9, 1, 0]

    [C:\WINDOWS\system32\Audiodev.dll]  [Microsoft Corporation, 5.2.3802.3802 built by: dnsrv(bld4act)]

    [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]

[PID: 1868 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852)]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

    [C:\WINDOWS\system32\mdimon.dll]  [Microsoft Corporation, 11.3.8166.2]

    [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll]  [Microsoft Corporation, 11.3.8166.2]

[PID: 124 / Administrator][C:\Program Files\Rising\Rfw\RfwMain.exe]  [Beijing Rising Technology Co., Ltd., 7.0.1.67]

    [C:\WINDOWS\system32\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]

    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]

    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]

    [C:\Program Files\Rising\Rfw\RsGuiLib.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 88]

    [C:\Program Files\Rising\Rfw\ProcCom.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]

    [C:\Program Files\Rising\Rfw\RsCommX2.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]

    [C:\Program Files\Rising\Rfw\RSAPPMGR.dll]  [Beijing Rising Technology Co., Ltd., 20.0.0.0]

    [C:\Program Files\Rising\Rfw\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 20.0.0.18]

    [C:\Program Files\Rising\Rfw\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16]

    [C:\Program Files\Rising\Rfw\RfwCtrl.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.7]

    [C:\Program Files\Rising\Rfw\RsXML.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 0]

    [C:\Program Files\Rising\Rfw\PngDll.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 4]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

    [C:\Program Files\Rising\Rfw\RfwRule.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.13]

[PID: 1040 / Administrator][C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe]  [Nero AG, 5, 5, 2, 8]

    [C:\Program Files\Nero\Nero 7\InCD\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]

    [C:\Program Files\Nero\Nero 7\InCD\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]

    [C:\Program Files\Nero\Nero 7\InCD\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

    [C:\Program Files\Nero\Nero 7\InCD\NBHStr.dll]  [Nero AG, 5, 5, 2, 8]

    [C:\Program Files\Nero\Nero 7\InCD\NBHApi.dll]  [Nero AG, 5, 5, 2, 8]

[PID: 1092 / Administrator][C:\Program Files\Nero\Nero 7\InCD\InCD.exe]  [Nero AG, 5, 5, 2, 8]

    [C:\Program Files\Nero\Nero 7\InCD\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]

    [C:\Program Files\Nero\Nero 7\InCD\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]

    [C:\Program Files\Nero\Nero 7\InCD\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

    [C:\Program Files\Nero\Nero 7\InCD\InCDgui.dll]  [Nero AG, 5, 5, 2, 8]

    [C:\Program Files\Common Files\Ahead\Lib\AdvrCntr2.dll]  [Nero AG, 9,4,2, 10850]

    [C:\Program Files\Common Files\Ahead\Lib\ShellManager.dll]  [Nero AG, 7.9.4.2]

    [C:\Program Files\Nero\Nero 7\InCD\InCDAPI2.dll]  [Nero AG, 5, 5, 2, 8]

[PID: 1176 / Administrator][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

[PID: 1204 / Administrator][C:\Program Files\SogouInput\OlympicNews.exe]  [Sogou.com Inc., 3.5.0.0]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

    [C:\Program Files\SogouInput\pxpnet.dll]  [Sohu.com Inc., 1, 0, 0, 13]

[PID: 1248 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852)]

[PID: 1268 / SYSTEM][C:\Program Files\StormII\stormliv.exe]  [北京暴风网际科技有限公司, 3, 8, 3, 15]

    [C:\Program Files\StormII\MSVCP60.dll]  [Microsoft Corporation, 6.02.3104.0]

[PID: 1420 / SYSTEM][C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe]  [Nero AG, 5, 5, 2, 8]

    [C:\Program Files\Nero\Nero 7\InCD\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]

    [C:\Program Files\Nero\Nero 7\InCD\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]

    [C:\Program Files\Common Files\Ahead\Lib\AdvrCntr2.dll]  [Nero AG, 9,4,2, 10850]

    [C:\Program Files\Common Files\Ahead\Lib\DriveLocker.dll]  [Nero AG, 1, 0, 0, 20]

    [C:\Program Files\Nero\Nero 7\InCD\incdshx.dll]  [Nero AG, 5, 5, 2, 8]

    [C:\Program Files\Nero\Nero 7\InCD\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]

[PID: 1556 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]

[PID: 1564 / LOCAL SERVICE][C:\WINDOWS\system32\wdfmgr.exe]  [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]

[PID: 2052 / Administrator][D:\Program Files\QQ\QQ.exe]  [TENCENT, 8,0,713,1791]

    [D:\Program Files\QQ\QQBaseClassInDll.dll]  [TENCENT, 8,0,713,1791]

    [D:\Program Files\QQ\QQHelperDll.dll]  [TENCENT, 8,0,713,1791]

    [D:\Program Files\QQ\BasicCtrlDll.dll]  [TENCENT, 8,0,713,1791]

    [D:\Program Files\QQ\MFC42.DLL]  [Microsoft Corporation, 6.00.8665.0]

    [D:\Program Files\QQ\IPPlugin.dll]  [Softdiy, 飘云]

    [D:\Program Files\QQ\ipaddr.dll]  [N/A, ]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

    [D:\Program Files\QQ\RICHED32.DLL]  [Microsoft Corporation, 5.00.2134.1]

    [D:\Program Files\QQ\RICHED20.dll]  [Microsoft Corporation, 5.31.23.1218]

    [D:\Program Files\QQ\QQAPI.dll]  [TENCENT, 8,0,713,1791]

    [D:\Program Files\QQ\LoginCtrl.dll]  [TENCENT, 8,0,713,1791]

    [D:\Program Files\QQ\LoginCtrlRes.dll]  [TENCENT, 8,0,713,1791]

    [D:\Program Files\QQ\QQRes.dll]  [TENCENT, 8,0,713,1791]

    [D:\Program Files\QQ\QQMainFrame.dll]  [N/A, ]

    [D:\Program Files\QQ\gdiplus.dll]  [Microsoft Corporation, 5.1.3102.2180 (xpsp_sp2_rtm.040803-2158)]

    [D:\Program Files\QQ\QQPlugin.dll]  [N/A, ]

    [D:\Program Files\QQ\UnReadMsgMgr.dll]  [N/A, ]

    [D:\Program Files\QQ\CQQApplication.dll]  [N/A, ]

    [D:\Program Files\QQ\FlashAvatarDll.dll]  [, 1, 4, 0, 1]

    [D:\Program Files\QQ\NewSkin.dll]  [TENCENT, 8,0,713,1791]

    [D:\Program Files\QQ\MailSummary.dll]  [TENCENT, 8,0,713,1791]

    [D:\Program Files\QQ\QQSpace.dll]  [TENCENT, 8,0,713,1791]

    [D:\Program Files\QQ\vbscript.dll]  [Microsoft Corporation, 5.6.0.7426]

    [C:\WINDOWS\system32\msdmo.dll]  [, ]

    [D:\Program Files\QQ\QQKnowledgeSearch.dll]  [TENCENT, 8,0,713,1791]

    [D:\Program Files\QQ\OEMApplication.dll]  [TENCENT, 8,0,713,1791]

    [D:\Program Files\QQ\QQGroupMng.dll]  [TENCENT, 8,0,713,1791]

    [D:\Program Files\QQ\QQAllInOne.dll]  [TENCENT, 8,0,713,1791]

    [D:\Program Files\QQ\SCCore.dll]  [TENCENT, 1, 6, 0, 2]

    [D:\Program Files\QQ\CameraDll.dll]  [TENCENT, 8,0,713,1791]

    [D:\Program Files\QQ\QQPet.dll]  [TENCENT, 8,0,713,1791]

    [D:\Program Files\QQ\QQSysMsgMng.dll]  [N/A, ]

    [D:\Program Files\QQ\UserDefinedHead.dll]  [TENCENT, 8,0,713,1791]

    [D:\Program Files\QQ\QQConfigPlugin.dll]  [TENCENT, 8,0,713,1791]

    [D:\Program Files\QQ\QQCustomFace.dll]  [N/A, ]

    [D:\Program Files\QQ\QRingMng.dll]  [N/A, ]

    [D:\Program Files\QQ\QQAvatar.dll]  [N/A, ]

    [D:\Program Files\QQ\LongConnection.dll]  [TENCENT, 8,0,713,1791]

    [D:\Program Files\QQ\PhoneAPI.dll]  [TENCENT, 8,0,713,1791]

    [D:\Program Files\QQ\DialerAllinOne.dll]  [tencent, 1, 4, 0, 0]

    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]

    [D:\Program Files\QQ\BQQApplication.dll]  [N/A, ]

    [D:\Program Files\QQ\CommercesMng.dll]  [TENCENT, 8,0,713,1791]

    [D:\Program Files\QQ\PersonalDesktop.dll]  [TENCENT, 8,0,713,1791]

    [D:\Program Files\QQ\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 330]

    [D:\Program Files\QQ\QQSceneMng.dll]  [N/A, ]

    [D:\Program Files\QQ\AddrSearch.dll]  [腾讯科技（深圳）有限公司, 2, 2, 1, 15]

    [C:\WINDOWS\system32\l3codeca.acm]  [Fraunhofer Institut Integrierte Schaltungen IIS, 1, 9, 0, 0305]

[PID: 2412 / Administrator][D:\Program Files\QQ\TXPlatform.exe]  [Tencent, 1, 0, 170, 0]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

[PID: 3136 / Administrator][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

    [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]

    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]

    [C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx]  [Adobe Systems, Inc., 9,0,124,0]

    [C:\WINDOWS\system32\msdmo.dll]  [, ]

    [C:\WINDOWS\system32\SOGOUPY.IME]  [Sogou.com Inc., 3.5.0.0]

    [C:\Program Files\SogouInput\Plugin\SgImeWord.dll]  [Sogou.com Inc., 3.5.0.0]

    [C:\WINDOWS\system32\freeime.ime]  [极点五笔工作室, 6.2.950]

[PID: 3920 / Administrator][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

    [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]

    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]

[PID: 964 / Administrator][d:\Program Files\Thunder Network\WebThunder\WebThunder.exe]  [深圳市迅雷网络技术有限公司, 1, 13, 1, 223]

    [d:\Program Files\Thunder Network\WebThunder\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

    [d:\Program Files\Thunder Network\WebThunder\TaskManager.dll]  [Thunder Networking Technologies,LTD, 1, 3, 1, 56]

    [d:\Program Files\Thunder Network\WebThunder\download_interface.dll]  [Thunder Networking Technologies,LTD, 2, 21, 2, 217]

    [d:\Program Files\Thunder Network\WebThunder\stlport_vc646.dll]  [STLport Consulting, Inc., 4.6.2003.1031]

    [d:\Program Files\Thunder Network\WebThunder\asyn_dns.dll]  [Thunder Networking Technologies,LTD, 2, 21, 2, 217]

    [d:\Program Files\Thunder Network\WebThunder\streammedialib.dll]  [, 1, 3, 2, 124]

    [d:\Program Files\Thunder Network\WebThunder\al.dll]  [, 1, 0, 1, 3]

    [d:\Program Files\Thunder Network\WebThunder\xldc.dll]  [Thunder Networking Technologies,LTD, 1, 0, 2, 14]

    [d:\Program Files\Thunder Network\WebThunder\bd.dll]  [Thunder Networking Technologies,LTD, 1, 0, 2, 6]

    [d:\Program Files\Thunder Network\WebThunder\RegisterDll.dll]  [Thunder Networking Technologies,LTD, 2, 16, 5, 63]

    [d:\Program Files\Thunder Network\WebThunder\CacheServer.dll]  [, 1, 0, 0, 1]

    [d:\Program Files\Thunder Network\WebThunder\XLSafe\SafeInfo.dll]  [深圳市迅雷网络技术有限公司, 1, 0, 1, 2]

    [d:\Program Files\Thunder Network\WebThunder\XLSafe\RMFScan.dll]  [N/A, ]

    [d:\Program Files\Thunder Network\WebThunder\XLNet.Dll]  [Thunder Networking Technologies,LTD, 1, 3, 4, 18]

    [C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx]  [Adobe Systems, Inc., 9,0,124,0]

    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]

    [d:\Program Files\Thunder Network\WebThunder\DownAndPlay\WebDownAndPlay.dll]  [ShenZhen Thunder Networking Technologies Ltd., 1, 0, 4, 22]

    [d:\Program Files\Thunder Network\WebThunder\XLStatistic\XLStatisticAddin.dll]  [深圳市迅雷网络技术有限公司, 1, 4, 1, 5]

[PID: 3412 / Administrator][C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.531\USBCleaner6.0\Usbmon.exe]  [ZJU S-Zone, 4.00.0023]

    [C:\WINDOWS\system32\msvbvm60.dll]  [Microsoft Corporation, 6.00.9802]

    [C:\WINDOWS\system32\vb6chs.dll]  [Microsoft Corporation, 6.00.8988]

    [C:\WINDOWS\system32\MSCOMCTL.OCX]  [Microsoft Corporation, 6.01.9545]

[PID: 2728 / Administrator][C:\Program Files\WinRAR\WinRAR.exe]  [N/A, ]

    [C:\WINDOWS\system32\Audiodev.dll]  [Microsoft Corporation, 5.2.3802.3802 built by: dnsrv(bld4act)]

[PID: 3276 / Administrator][C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.516\SREngLdr.EXE]  [Smallfrogs Studio, 2.6.10.990]

[PID: 4008 / Administrator][C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.516\SRE87b6af77.EXE]  [Smallfrogs Studio, 2.6.10.990]



==================================

文件关联

.TXT  Error. [C:\WINDOWS\notepad.exe %1]

.EXE  OK. ["%1" %*]

.COM  OK. ["%1" %*]

.PIF  OK. ["%1" %*]

.REG  OK. [regedit.exe "%1"]

.BAT  OK. ["%1" %*]

.SCR  OK. ["%1" /S]

.CHM  Error. ["hh.exe" %1]

.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]

.INI  Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1]

.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]

.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]

.JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]

.LNK  OK. [{00021401-0000-0000-C000-000000000046}]



==================================

Winsock 提供者

N/A



==================================

Autorun.inf

N/A



==================================

HOSTS 文件

127.0.0.1       localhost



==================================

进程特权扫描

特殊特权被允许： SeDebugPrivilege [PID = 2052, D:\PROGRAM FILES\QQ\QQ.EXE]

特殊特权被允许： SeLoadDriverPrivilege [PID = 2052, D:\PROGRAM FILES\QQ\QQ.EXE]

特殊特权被允许： SeDebugPrivilege [PID = 3412, C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMP\RAR$EX00.531\USBCLEANER6.0\USBMON.EXE]

特殊特权被允许： SeLoadDriverPrivilege [PID = 3412, C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMP\RAR$EX00.531\USBCLEANER6.0\USBMON.EXE]

特殊特权被允许： SeDebugPrivilege [PID = 2728, C:\PROGRAM FILES\WINRAR\WINRAR.EXE]

特殊特权被允许： SeLoadDriverPrivilege [PID = 2728, C:\PROGRAM FILES\WINRAR\WINRAR.EXE]

特殊特权被允许： SeDebugPrivilege [PID = 3276, C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMP\RAR$EX00.516\SRENGLDR.EXE]

特殊特权被允许： SeLoadDriverPrivilege [PID = 3276, C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMP\RAR$EX00.516\SRENGLDR.EXE]



==================================

API HOOK

N/A



==================================

隐藏进程

N/A



==================================

TOP

shoo

超级版主

Rank: 8 Rank: 8

UID: 33692
帖子: 1438
精华: 4
经验: 11520 点
威望: 864 点
维修币: 21019 ￥
魅力: 3336
阅读权限: 250

5^# 大中小发表于 2008-6-25 19:57 只看该作者

从日志里看你的IE文件丢失得很严重，你是不是自己用什么清理工具清理过系统啊，注册表已经缺失了不少。建议你先按照下面的步骤杀毒：

1、建议使用XDelBox删除以下文件：(XDelBox下载)
使用说明：删除时复制所有要删除文件的路径，在待删除文件列表里点击右键选择剪贴板导入不检查路径，导入后在要删除文件上点击右键，选择立刻重启删除，电脑会重启进入DOS界面进行删除操作。运行xdelbox前请卸载所有可移动存储设备。

C:\Windows \system32\DRIVERS\mv614x.sys

2.删除重启后使用SREng：

删除下面的驱动（运行SRENG--->启动项目--->服务--->驱动程序--->勾选隐藏已认证的微软项目--->选择要删除的驱动--->选择删除服务--->点击设置--->出现提示里选择否，确认删除。）

[mv614x / mv614x][Stopped/Disabled] <\SystemRoot\system32\DRIVERS\mv614x.sys>

3.下载windows清理助手清理恶意软件(升级至最新)
http://www.arswp.com/download/arswp2/arswp2.zip

4、下载临时文件清理工具(用工具下载：迅雷、Flashget等)
http://www.dodudou.com/down/ATF-Cleaner-cn.exe

5、下载超级兔子修复IE,如果全面修复还有问题就使用强力修复；
6、用WINDOC修复系统（下载地址置顶帖里有）

TOP

jisbn

维修工人

Rank: 2

UID: 39029
帖子: 32
精华: 0
经验: 46 点
威望: 0 点
维修币: -3 ￥
魅力: 0
阅读权限: 10

6^# 大中小发表于 2008-6-26 08:52 只看该作者

我都照着都做过一遍了，好象。。。。

以上步骤我都照着都做过一遍了，再帮我看看做过之后的日志吧

复制内容到剪贴板

代码:

2008-06-26,08:46:58

System Repair Engineer 2.6.10.990

Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 3 (Build 2600) - 管理权限用户 - 完整功能

以下内容被选中：

    所有的启动项目（包括注册表、启动文件夹、服务等）

    浏览器加载项

    正在运行的进程（包括进程模块信息）

    文件关联

    Winsock 提供者

    Autorun.inf

    HOSTS 文件

    进程特权扫描



启动项目

注册表

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Component Publisher]

    <OlympicExpress><"C:\Program Files\SogouInput\OlympicNews.exe">  [(Verified)Sogou.com]

    <TudouVAStart><C:\Program Files\Tudou\飞速Tudou\TudouVa.exe>  [File is missing]

[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]

    <load><>  [N/A]

    <run><>  [N/A]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

    <NeroFilterCheck><C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe>  [(Verified)Nero AG]

    <SecurDisc><C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe>  [(Verified)Nero AG]

    <InCD><C:\Program Files\Nero\Nero 7\InCD\InCD.exe>  [(Verified)Nero AG]

    <WebThunder><D:\Program Files\Thunder Network\WebThunder\WebThunder.exe>  [(Verified)ShenZhen Thunder Networking Technologies Ltd.]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]

    <shell><Explorer.exe>  [(Verified)Microsoft Windows Component Publisher]

    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Windows Component Publisher]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]

    <AppInit_DLLs><>  [N/A]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]

    <UIHost><logonui.exe>  [(Verified)Microsoft Windows Component Publisher]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]

    <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE>  [File is missing]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]

    <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [File is missing]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]

    <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [File is missing]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]

    <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [File is missing]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]

    <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Remove.PerUser.NT>  [(Verified)Microsoft Windows Component Publisher]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]

    <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser>  [(Verified)Microsoft Windows Component Publisher]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]

    <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [File is missing]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Your Image File Name Here without a path]

    <IFEO[Your Image File Name Here without a path]><ntsd -d>  [N/A]

==================================

启动文件夹

N/A

==================================

服务

[Contrl Center of Storm Media / ccosm][Running/Auto Start]

  <C:\Program Files\StormII\stormliv.exe /asservice><北京暴风网际科技有限公司>

[Help and Support / helpsvc][Stopped/Disabled]

  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll><N/A>

[HID Input Service / HidServ][Stopped/Auto Start]

  <\SystemRoot\C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>

[InCD Helper / InCDsrv][Running/Auto Start]

  <C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe><Nero AG>

[NetMeeting Remote Desktop Sharing / mnmsrvc][Stopped/Manual Start]

  <><(File is missing)>

[NBService / NBService][Stopped/Manual Start]

  <C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe><Nero AG>

[NMIndexingService / NMIndexingService][Stopped/Manual Start]

  <"C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe"><Nero AG>

[Rising Proxy  Service / RfwProxySrv][Running/Auto Start]

  <C:\Program Files\Rising\Rfw\rfwProxy.exe><Beijing Rising Technology Co., Ltd.>

[Rising Personal Firewall Service / RfwService][Running/Auto Start]

  <C:\Program Files\Rising\Rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.>

==================================

驱动程序

[2310_00 / 2310_00][Stopped/Boot Start]

  <\SystemRoot\system32\DRIVERS\2310_00.sys><HighPoint Technologies, Inc.>

[3wareDrv / 3wareDrv][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\3wareDrv.sys><N/A>

[3waregsm / 3waregsm][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\3waregsm.sys><N/A>

[a320raid / a320raid][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\a320raid.sys><Adaptec, Inc.>

[aaatimeo / aaatimeo][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\aaatimeo.sys><Microsoft Corporation>

[Adaptec RAID Miniport Driver / aac][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\aac.sys><Adaptec, Inc.>

[Adaptec SAS/SATA-II RAID Miniport Driver / aacsas][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\aacsas.sys><Adaptec, Inc.>

[aar1210 / aar1210][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\aar1210.sys><Adaptec, Inc.>

[adp94xx / adp94xx][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\adp94xx.sys><Adaptec, Inc.>

[adpu160m / adpu160m][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\adpu160m.sys><Adaptec, Inc.>

[adpu320 / adpu320][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\adpu320.sys><Adaptec, Inc.>

[ACARD AEC6210UF UltraDMA33 Controller / aec6210][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\aec6210.sys><ACARD Technology Corp.>

[ACARD AEC6260 UltraDMA-66 Controller / aec6260][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\aec6260.sys><ACARD Technology Corp.>

[aec6280 / aec6280][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\aec6280.sys><ACARD Technology Corp.>

[aec6290 / aec6290][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\aec6280.sys><ACARD Technology Corp.>

[aec67160 / aec67160][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\aec67160.sys><ACARD Technology Corp.>

[AEC671X / AEC671X][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\AEC671X.sys><ACARD Technology Corp.>

[AEC6880 / AEC6880][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\AEC6880.sys><ACARD Technology Corp.>

[aec6897 / aec6897][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\aec6897.sys><ACARD Technology Corp.>

[aec68x5 / aec68x5][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\aec68x5.sys><ACARD Technology Corp.>

[AFAMgt / AFAMgt][Running/Boot Start]

  <\SystemRoot\system32\DRIVERS\afamgt.sys><Adaptec, Inc.>

[ahcix86 / ahcix86][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\ahcix86.sys><ATI Technologies Inc.>

[Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start]

  <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>

[AliIde / AliIde][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\aliide.sys><ALi Corporation>

[AMD AGP Bus Filter Driver / amdagp][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\amdagp.sys><Advanced Micro Devices, Inc.>

[amdbusdr / amdbusdr][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\amdbusdr.sys><AMD>

[AMD EIDE 驱动程衼E / amdeide][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\AmdEide.sys><AMD>

[arcm_x86 / arcm_x86][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\arcm_x86.sys><ARECA Technology Corporation>

[asc / asc][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\asc.sys><Advanced System Products, Inc.>

[asc3550 / asc3550][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\asc3550.sys><Advanced System Products, Inc.>

[SiI-3112 SATALink  Controller / ASH1205][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\ASH1205.sys><Silicon Image, Inc.>

[ata1200a / ata1200a][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\ata1200a.sys><Adaptec, Inc.>

[atiide / atiide][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\atiide.sys><ATI Technologies Inc.>

[Promise driver accelerator / bb-run][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\bb-run.sys><Promise Technology, Inc.>

[cda1000 / cda1000][Stopped/Boot Start]

  <\SystemRoot\system32\DRIVERS\cda1000.sys><Adaptec, Inc.>

[DELL CERC SATA 1.5/6ch RAID Miniport Driver / cercsr6][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\cercsr6.sys><Adaptec, Inc.>

[CmdIde / CmdIde][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\cmdide.sys><CMD Technology, Inc.>

[Cpq32fs2 / Cpq32fs2][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\Cpq32fs2.sys><Hewlett-Packard Company>

[cpqarry2 / cpqarry2][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\cpqarry2.sys><Compaq Computer Corporation>

[cpqcissm / cpqcissm][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\cpqcissm.sys><Hewlett-Packard Company>

[dac2w2k / dac2w2k][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\dac2w2k.sys><Mylex Corporation>

[dac960nt / dac960nt][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\dac960nt.sys><Mylex Corporation>

[Promise Removable Disk Control Driver / dontgo][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\DontGo.sys><Promise Technology, Inc.>

[dpti2o / dpti2o][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\dpti2o.sys><Adaptec, Inc.>

[FastSx / FastSx][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\FastSx.sys><Promise Technology, Inc.>

[fasttrak / fasttrak][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\fasttrak.sys><Promise Technology, Inc.>

[fasttx2k / fasttx2k][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\fasttx2k.sys><Promise Technology, Inc.>

[fttxr52P / fttxr52P][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\fttxr52P.sys><Promise Technology, Inc.>

[Microsoft 用于 High Definition Audio 的 UAA 总线驱动程序 / HDAudBus][Stopped/Manual Start]

  <system32\DRIVERS\HDAudBus.sys><Windows (R) Server 2003 DDK provider>

[HookUrl / HookUrl][Running/Auto Start]

  <\??\C:\Program Files\Rising\Rfw\HookUrl.sys><Beijing Rising Technology Co., Ltd.>

[HpCISSm2 / HpCISSm2][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\HpCISSm2.sys><Hewlett-Packard Company>

[Hpt366 / Hpt366][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\Hpt366.sys><Microsoft Corporation>

[hpt374 / hpt374][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\hpt374.sys><HighPoint Technologies, Inc.>

[hpt3xx / hpt3xx][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\hpt3xx.sys><HighPoint Technologies, Inc.>

[hptmv / hptmv][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\hptmv.sys><HighPoint Technologies, Inc.>

[hptmv6 / hptmv6][Stopped/Boot Start]

  <\SystemRoot\system32\DRIVERS\hptmv6.sys><HighPoint Technologies, Inc.>

[hptpro / hptpro][Stopped/Boot Start]

  <\SystemRoot\system32\DRIVERS\hptpro.sys><HighPoint Technologies, Inc.>

[Intel RAID Controller / iaStor][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\iaStor.sys><Intel Corporation>

[Intel  RAID Controller / iaStor55][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\iaStor55.sys><Intel Corporation>

[Intel RAID  Controller / iaStor70][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\iaStor70.sys><Intel Corporation>

[InCD File System / InCDfs][Running/Disabled]

  <system32\drivers\InCDFs.sys><Nero AG>

[InCDPass / InCDPass][Running/System Start]

  <system32\drivers\InCDPass.sys><Nero AG>

[InCD Reader / incdrm][Running/System Start]

  <system32\drivers\InCDRm.sys><Nero AG>

[IBM ServeRAID Device Driver / ipsraidn][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\ipsraidn.sys><IBM Corporation>

[ISO CD-ROM Device Driver / ISODrive][Running/System Start]

  <\??\C:\Program Files\UltraISO\drivers\ISODrive.sys><EZB Systems, Inc.>

[ITERAID_Service_Install / iteraid][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\iteraid.sys><Integrated Technology Express, Inc.>

[JRAID / JRAID][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\jraid.sys><JMicron Technology Corp.>

[m5228 / m5228][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\m5228.sys><ALi Corporation.>

[m5281 / m5281][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\m5281.sys><ALi Corporation>

[m5287 / m5287][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\m5287.sys><ULi Electronics Inc.>

[m5288 / m5288][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\m5288.sys><ULi Electronics Inc.>

[m5289 / m5289][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\m5289.sys><ULi Electronics Inc.>

[MegaIDE / MegaIDE][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\MegaIDE.sys><LSI Logic Corporation.>

[mraid35x / mraid35x][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\mraid35x.sys><American Megatrends Inc.>

[mv61xx / mv61xx][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\mv61xx.sys><Marvell Semiconductor, Inc.>

[mvSata / mvSata][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\mvsata.sys><Marvell Semiconductors Inc.>

[IBM ServeRAID 4M/4L/4Mx/4Lx/5i/6M/6i/7k Device Driver / nfrd960][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\nfrd960.sys><IBM Corporation>

[nv / nv][Running/Manual Start]

  <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>

[nvatabus / nvatabus][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\nvatabus.sys><NVIDIA Corporation>

[nvgts / nvgts][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\nvgts.sys><NVIDIA Corporation>

[NVIDIA nForce(tm) RAID Class Driver / nvraid][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\nvraid.sys><NVIDIA Corporation>

[NVIDIA nForce RAID Driver / nvrd32][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\nvrd32.sys><NVIDIA Corporation>

[CMD IDE Raid Controller / Pnp649r][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\pnp649r.sys><CMD Technology, Inc.>

[SiI 680 ATA Controller / Pnp680][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\pnp680.sys><Silicon Image, Inc.>

[Silicon Image SiI 0680 Medley Raid Controller / Pnp680r][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\pnp680r.sys><Silicon Image, Inc>

[Direct Parallel Link Driver / Ptilink][Running/Manual Start]

  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>

[ql1080 / ql1080][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\ql1080.sys><QLogic Corporation>

[ql12160 / ql12160][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\ql12160.sys><QLogic Corporation>

[ql1280 / ql1280][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\ql1280.sys><QLogic Corporation>

[ql2100 / ql2100][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\ql2100.sys><QLogic Corporation>

[ql2200 / ql2200][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\ql2200.sys><QLogic Corporation>

[QLogic Fibre Channel SCSI Miniport Driver (w32 IP) / ql2300][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\ql2300.sys><QLogic Corporation>

[raidsrc / raidsrc][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\raidsrc.sys><Intel>

[Rising  Rfwbase Driver / RfwBase][Running/Auto Start]

  <System32\DRIVERS\rfwbase.SYS><Beijing Rising Technology Co., Ltd.>

[rr172x / rr172x][Stopped/Boot Start]

  <\SystemRoot\system32\DRIVERS\rr172x.sys><HighPoint Technologies, Inc.>

[rr174x / rr174x][Stopped/Boot Start]

  <\SystemRoot\system32\DRIVERS\rr174x.sys><HighPoint Technologies, Inc.>

[rr232x / rr232x][Stopped/Boot Start]

  <\SystemRoot\system32\DRIVERS\rr232x.sys><HighPoint Technologies, Inc.>

[rr2340 / rr2340][Stopped/Boot Start]

  <\SystemRoot\system32\DRIVERS\rr2340.sys><HighPoint Technologies, Inc.>

[RsFwDrv / RsFwDrv][Running/System Start]

  <\??\C:\Program Files\Rising\Rfw\RsFwDrv.sys><Beijing Rising Technology Co., Ltd.>

[Realtek 10/100/1000 PCI NIC Family NDIS XP Driver / RTL8023xp][Running/Manual Start]

  <system32\DRIVERS\Rtnicxp.sys><Realtek Semiconductor Corporation>

[Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Stopped/Manual Start]

  <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>

[S150sx8 / S150sx8][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\S150sx8.sys><Promise Technology, Inc.>

[Secdrv / Secdrv][Stopped/Manual Start]

  <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>

[SiI-3512 SATALink Controller / SI3112][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\SI3112.sys><Silicon Image, Inc.>

[ATI-437A Serial ATA Controller / SI3112r][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\SI3112r.sys><Silicon Image, Inc>

[SiI-3114 SATALink Controller / SI3114][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\SI3114.sys><Silicon Image, Inc.>

[SiI-3114 SATARaid Controller / SI3114r][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\SI3114R.sys><Silicon Image, Inc>

[SiI-3114 SoftRaid 5 Controller / Si3114r5][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\Si3114r5.sys><Silicon Image, Inc>

[SiI-3124 SATALink Controller / SI3124][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\SI3124.sys><Silicon Image, Inc.>

[SiI-3124 SATARaid Controller / SI3124r][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\SI3124R.sys><Silicon Image, Inc>

[SiI-3124 SoftRaid 5 Controller / Si3124r5][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\Si3124r5.sys><Silicon Image, Inc>

[SiI-3132 SATALink Controller / SI3132][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\SI3132.sys><Silicon Image, Inc.>

[SiI-3132 SoftRaid 5 Controller / Si3132r5][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\Si3132r5.sys><Silicon Image, Inc>

[SATALink driver accelerator / SiFilter][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\SiWinAcc.sys><Silicon Image, Inc.>

[SATALink External Device Filter / SiRemFil][Running/Boot Start]

  <\SystemRoot\system32\DRIVERS\SiRemFil.sys><Silicon Image, Inc.>

[SiSide / SiSide][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\siside.sys><Silicon Integrated Systems Corp.>

[SiSRaid4 / SiSRaid4][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\sisraid4.sys><Silicon Integrated Systems>

[sisraidx / sisraidx][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\sisraidx.sys><Silicon Integrated Systems Corp.>

[Sparrow / Sparrow][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\sparrow.sys><Adaptec, Inc.>

[sptrak / sptrak][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\sptrak.sys><Promise Technology, Inc.>

[symc8xx / symc8xx][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\symc8xx.sys><LSI Logic>

[Symmpi / Symmpi][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\symmpi.sys><LSI Logic>

[sym_hi / sym_hi][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\sym_hi.sys><LSI Logic>

[sym_u3 / sym_u3][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\sym_u3.sys><LSI Logic>

[UlSata / UlSata][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\ulsata.sys><Promise Technology, Inc.>

[ulsata2 / ulsata2][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\ulsata2.sys><Promise Technology, Inc.>

[ultra / ultra][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\ultra.sys><Promise Technology, Inc.>

[VIA AGP Filter / viaagp1][Running/Boot Start]

  <\SystemRoot\system32\DRIVERS\viaagp1.sys><VIA Technologies, Inc.>

[viamraid / viamraid][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\viamraid.sys><VIA Technologies inc,.ltd>

[VIA ATA/ATAPI Host Controller / viapdsk][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\viapdsk.sys><VIA Technologies, Inc.>

[ViBus / ViBus][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\ViBus.sys><VIA Technologies, Inc.>

[videX32 / videX32][Running/Boot Start]

  <\SystemRoot\system32\DRIVERS\videX32.sys><VIA Technologies, Inc.>

[VIA SATA IDE Device Driver / ViPrt][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\ViPrt.sys><VIA Technologies, Inc.>

[VMscsi / VMscsi][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\vmscsi.sys><VMware, Inc.>

[VIA SATA IDE Hot-plug Driver / xfilt][Stopped/Disabled]

  <\SystemRoot\system32\DRIVERS\xfilt.sys><VIA Technologies,Inc>

==================================

浏览器加载项

[启动WEB迅雷]

  {962EFB8E-2683-42d4-AC74-AAA4C759B9C6} <http://my.xunlei.com, N/A>

[WebThunder Browser Helper]

  {00000AAA-A363-466E-BEF5-9BB68697AA7F} <d:\Program Files\Thunder Network\WebThunder\WebThunderBHO_Now.dll, Thunder Networking Technologies,LTD>

[WebThunder Class]

  {03507A1A-E0C5-4404-AA26-205385C0892D} <, N/A>

[HTML Document]

  {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>

[DHTML Edit Control Safe for Scripting for IE5]

  {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\WINDOWS\system32\dllcache\dhtmled.ocx, Microsoft Corporation>

[Shell Name Space]

  {55136805-B2DE-11D1-B9F2-00A0C98BC547} <%SystemRoot%\system32\shdocvw.dll, N/A>

[Windows Media Player]

  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>

[Microsoft Web 浏览器]

  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>

[RealPlayer G2 Control]

  {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\Program Files\StormII\Codec\rmoc3260.dll, RealNetworks, Inc.>

[Shockwave Flash Object]

  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx, Adobe Systems, Inc.>

[XPPlayer Class]

  {F3E70CEA-956E-49CC-B444-73AFE593AD7F} <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\pplayer.dll_1_work, Thunder>

[使用WEB迅雷下载]

  <d:\Program Files\Thunder Network\WebThunder\GetUrl.htm, N/A>

[使用WEB迅雷下载全部链接]

  <d:\Program Files\Thunder Network\WebThunder\GetAllUrl.htm, N/A>

[导出到 Microsoft Office Excel(&X)]

  <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>

==================================

正在运行的进程

[PID: 568 / SYSTEM][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]

[PID: 640 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

[PID: 668 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]

[PID: 720 / SYSTEM][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]

    [C:\WINDOWS\AppPatch\AcAdProc.dll]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

[PID: 732 / SYSTEM][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

[PID: 888 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

[PID: 968 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

[PID: 1060 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

[PID: 1116 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

[PID: 1224 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

[PID: 1256 / SYSTEM][C:\Program Files\Rising\Rfw\rfwsrv.exe]  [Beijing Rising Technology Co., Ltd., 7.0.0.73]

    [C:\WINDOWS\system32\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]

    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]

    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]

    [C:\Program Files\Rising\Rfw\ProcCom.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]

    [C:\Program Files\Rising\Rfw\RsCommX2.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]

    [C:\Program Files\Rising\Rfw\RSAPPMGR.dll]  [Beijing Rising Technology Co., Ltd., 20.0.0.0]

    [C:\Program Files\Rising\Rfw\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 20.0.0.18]

    [C:\Program Files\Rising\Rfw\RfwRule.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.13]

    [C:\Program Files\Rising\Rfw\rfwlog.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.12]

    [C:\Program Files\Rising\Rfw\Rfwdrv.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.45]

    [C:\Program Files\Rising\Rfw\ijt_ctrl.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.0]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

    [C:\Program Files\Rising\Rfw\unvdet.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]

    [C:\Program Files\Rising\Rfw\mPorts.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.3]

[PID: 1388 / SYSTEM][C:\Program Files\Rising\Rfw\rfwProxy.exe]  [Beijing Rising Technology Co., Ltd., 7.0.0.34]

    [C:\WINDOWS\system32\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]

    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]

    [C:\Program Files\Rising\Rfw\ProcCom.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]

    [C:\Program Files\Rising\Rfw\RsCommX2.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]

    [C:\Program Files\Rising\Rfw\RfwRule.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.13]

    [C:\Program Files\Rising\Rfw\urlrule.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 9]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

    [C:\Program Files\Rising\Rfw\MonMid.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.4]

[PID: 1576 / SYSTEM][C:\Program Files\Rising\Rfw\rfwstub.exe]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]

    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]

    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]

    [C:\Program Files\Rising\Rfw\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16]

    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.19]

    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.6]

[PID: 1776 / Administrator][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.29