引用

[CODE] szcuip2=w  
2007-07-07,22:56:31 V8Jb5  
System Repair Engineer 2.5.16.900 k`+\t  
Smallfrogs (http://www.KZTechs.com) <XVVjYI7+  
Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能 {~IN]f)k  
以下内容被选中： B>U L  
    所有的启动项目（包括注册表、启动文件夹、服务等） bIu#B?6A&4  
    浏览器加载项 M|yOg5  
    正在运行的进程（包括进程模块信息） hV?VU
C&  
    文件关联 PS?@ d>a  
    Winsock 提供者 E7;~:2A?  
    Autorun.inf }5L#uT-o  
    HOSTS 文件 oO6a0J`Y  
    进程特权扫描  @h02/l*  

引用

启动项目 LZ jzE^*>.  
注册表 #*2a.G  
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] 'Y%*MG>C  
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Publisher] ;/A,{S,"  
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] L%et2  
    <load> <>  [N/A] sR0
p{C|  
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] T% 8mYs '  
    <igfxtray><C:\WINDOWS\system32\igfxtray.exe>  [(Verified)Microsoft Windows Publisher] a0RH(kwWf  
  <igfxhkcmd><C:\WINDOWS\system32\hkcmd.exe>  [(Verified)Microsoft Windows Hardware Compatibility Publisher] 9fV4,`  
    <igfxpers><C:\WINDOWS\system32\igfxpers.exe>  [(Verified)Microsoft Windows Hardware Compatibility Publisher] ;0 [C5
 
    <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system>  [Beijing Rising Technology Co., Ltd.] }>DetDt  
    <RfwMain><"C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup>  [Beijing Rising Technology Co., Ltd.] tqFi/O0F  
  <runeip><"C:\Program Files\Rising\AntiSpyware\runiep.exe" /startup>  [Beijing Rising Technology Co., Ltd.] H|[W!X~  
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce] f}`sdzS  
    <KKDelay><C:\Program Files\Rising\AntiSpyware\RunOnce.exe> [Beijing Rising Technology Co., Ltd.] B*1Q<Cx5B  
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] *)([ MIx,  
    <shell><Explorer.exe>  [(Verified)Microsoft Windows Publisher] s k9X  
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Windows Publisher] ]7G%O!Fl]  
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] sl%r=9T  
    <AppInit_DLLs><>  [N/A]
F[a,LB  
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] EU'dkM1L  
    <UIHost><logonui.exe>  [(Verified)Microsoft Windows Publisher] vGL L$  
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] 0'Y?ET6h  
    <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll>  [Beijing Rising Technology Co., Ltd.] =Kdo=.! e  
    <{AC2DC2EF-5165-40A3-8CDF-41DCA1B0901A}><C:\WINDOWS\system32\shlhook.dll>  [Beijing Rising Technology Co., Ltd.] U`O(&6l+}  
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] _e|C5'B  
    <WPDShServiceObj><C:\WINDOWS\system32\WPDShServiceObj.dll>  [(Verified)Microsoft Windows Component Publisher] ld5wj K}  
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui] 35iw0Jxd!  
    <WinlogonNotify: igfxcui><igfxdev.dll>  [(Verified)Microsoft Windows Hardware Compatibility Publisher] Bb7D{{yb  
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon] AoZ^/=c  
    <WinlogonNotify: WgaLogon><WgaLogon.dll>  [(Verified)Microsoft Corporation] 5D5P  
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}] %D&wl_3W  
    <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE>  [N/A] F|e6hH==  
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] 70T/XY  
    <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [N/A] ]K~wIDxf^  
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] *e`TBczB^  
    <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [N/A] f^vWGpWm  
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] udBQ+v
  
    <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [N/A] |!MyL.!?v  
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] Wym<B[A  
    <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT>  [(Verified)Microsoft Windows Publisher] zg/)5j)qK  
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}] VpgADX/q  
    <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser>  [(Verified)Microsoft Windows Publisher] 8K}&

 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}] H$9>\5Sg6  
    <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub>  [(Verified)Microsoft Windows Component Publisher] -'|+:  
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}] KeM9j#'  
    <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [N/A] Czy`\:Dx  
/eTtPTN  
================================== %(9mI#  
启动文件夹 O3 [z(  
N/A B |Khkz  

引用

wz5F1k5  
服务 .G1.,
::$  
[Human Interface Device Access / HidServ][Stopped/Disabled] bO^ZN`,J  
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A> n3\OVHNd4  
[Rising Proxy  Service / RfwProxySrv][Stopped/Manual Start] &e}~z.4  
  <c:\program files\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.> !AN^5MA  
[Rising Personal Firewall Service / RfwService][Running/Auto Start] JveR1o`e
 
  <c:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.> >e%M^K  
[Rising Process Communication Center / RsCCenter][Running/Auto Start] v^\d"<  
  <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.> WDo730   
[Rising RealTime Monitor / RsRavMon][Running/Auto Start] +e#l0+:v  
  <"C:\PROGRAM FILES\RISING\RAV\Ravmond.exe"><Beijing Rising Technology Co., Ltd.> %1eE,,  
================================== wJ]M
3TVs  
驱动程序 !Q]!O_-`  
[2310_00 / 2310_00][Stopped/Boot Start] tg+WMHu.  
  <\SystemRoot\System32\BIRD\2310_00.sys><HighPoint Technologies, Inc.> z84d9iw  
[3WAREDRV / 3WAREDRV][Stopped/Boot Start] PN^h`%w  
  <\SystemRoot\System32\BIRD\3WAREDRV.SYS><N/A> hKMac_d;  
[A320RAID / A320RAID][Stopped/Boot Start] jF&PU6MQ:  
  <\SystemRoot\System32\BIRD\a320raid.sys><Adaptec, Inc.> {acd8BKXy  
[AAC / AAC][Stopped/Boot Start] cfO7L_nzr  
  <\SystemRoot\System32\BIRD\aac.sys><Adaptec, Inc.> C >$H  
[AACSAS / AACSAS][Stopped/Boot Start] SM|S s^c  
  <\SystemRoot\System32\BIRD\aacsas.sys><Adaptec, Inc.> (Njn@DB'  
[Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start] Z.WU_'=b  
  <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.> m$T7B+b_  
[AmdK8 Compatible Device / AmdK8][Stopped/System Start] $solB|{i%  
  <System32\BIRD\amdk8.sys><Advanced Micro Devices> !be\ya  
[ARCM_X86 / ARCM_X86][Stopped/Boot Start] iNg{r?n/Y  
  <\SystemRoot\System32\BIRD\arcm_x86.sys><ARECA  Technology Corporation> ,dCD8C;*E9  
[Rising TDI Base Driver / BaseTDI][Running/Auto Start] gu!.em#  
  <System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.> cTbE/  
[BCHTSW32 / BCHTSW32][Stopped/Boot Start] ?6G)/S  
  <\SystemRoot\System32\BIRD\bchtsw32.sys><Broadcom Corporation> z#1m1>zB  
[dpti2o / dpti2o][Running/Boot Start] :a>_a['^$  
  <\SystemRoot\System32\BIRD\dpti2o.sys><Microsoft Corporation> 4Z;p
&U  
[ExpScaner / ExpScaner][Running/Auto Start] TKV9j 3  
  <\??\C:\PROGRAM FILES\RISING\RAV\ExpScan.sys><> 6@PQz.N  
[FASTSX / FASTSX][Running/Boot Start] T95.8p 7  
  <\SystemRoot\System32\BIRD\fastsx.sys><Promise Technology, Inc.> FMPPK"J  
[FASTTRAK / FASTTRAK][Running/Boot Start] @n~(Ijou  
  <\??\C:\WINDOWS\system32\drivers\hjg47ql8p.sys><N/A> x2T3VGiE  
[HookCont / HookCont][Running/Auto Start] F?YUGPaN  
  <\??\C:\PROGRAM FILES\RISING\RAV\HOOKCONT.sys><Rising> {|],JlZgg  
[HookReg / HookReg][Running/Auto Start] 9)~@EG  
  <\??\C:\PROGRAM FILES\RISING\RAV\HookReg.sys><> IKnb-2`m_  
[HookSys / HookSys][Running/Auto Start]  ua2t`[n  
  <\??\C:\PROGRAM FILES\RISING\RAV\HookSys.sys><Rising> =gEs%>Cy  
[HookUrl / HookUrl][Running/Auto Start] cv@`~vhL  
  <\??\C:\Program Files\Rising\Rfw\HookUrl.sys><Beijing Rising Technology Co., Ltd.> JI9z7rN  
[HPT3XX / HPT3XX][Stopped/Boot Start] /GF,-(  
  <\SystemRoot\System32\BIRD\hpt3xx.sys><HighPoint Technologies, Inc.>  $B1  
[ialm / ialm][Running/Manual Start] #)&}-H  
  <system32\DRIVERS\ialmnt5.sys><Intel Corporation> 'Ul*w
d  
[IASTOR / IASTOR][Running/Boot Start] J'!T4Jy  
  <\SystemRoot\System32\BIRD\iaStor.sys><Intel Corporation> }o$7:{?  
  <\SystemRoot\System32\BIRD\m5289.sys><ULi Electronics Inc.> ~Z)RK0g4t2  
[MEGAIDE / MEGAIDE][Running/Boot Start] Hh!n`*  
  <\SystemRoot\System32\BIRD\MegaIDE.sys><LSI Logic Corporation.> apWc\)mc  
[MEMSCAN / MEMSCAN][Running/Auto Start] QdCTO  
  <\??\C:\PROGRAM FILES\RISING\RAV\MEMSCAN.sys><瑞星软件有限公司> K`L/2u.2  
[mProcRs / mProcRs][Running/Auto Start] l/&Z_}o  
  <\??\c:\program files\rising\rfw\mProcRs.sys><Beijing Rising Technology Co., Ltd.> l;bRJ6  
[mraid35x / mraid35x][Running/Boot Start] %fF- .%  
  <\SystemRoot\System32\BIRD\mraid35x.sys><LSI Logic Corporation> pZ1lIva  
[NFRD960 / NFRD960][Stopped/Boot Start] j$;76xf}  
  <\SystemRoot\System32\BIRD\nfrd960.sys><IBM Corporation> G,>(<]9(  
[Netgroup Packet Filter / NPF][Stopped/Manual Start] \q17ScZf\  
  <system32\drivers\npf.sys><Politecnico di Torino> vwMqp ._  
[npkcrypt / npkcrypt][Running/Auto Start] t[>;=  
  <\??\C:\Program Files\Tencent\QQ\npkcrypt.sys><INCA Internet Co., Ltd.> 4da'7M~cc  
[nv / nv][Stopped/Manual Start] HNvEq  
  <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation> 4Ql p<  
[NVATABUS / NVATABUS][Running/Boot Start] w`1hZ%,  
  <\SystemRoot\System32\BIRD\NVATABUS.SYS><NVIDIA Corporation> Eg?3x_
{  
[PNP680R / PNP680R][Stopped/Boot Start] 10XjG  
  <\SystemRoot\System32\BIRD\pnp680r.sys><Silicon Image, Inc> 9kGYH  
[Direct Parallel Link Driver / Ptilink][Running/Manual Start] BJ{!6vMt  
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.> 57mah"dH"  
[ql1080 / ql1080][Running/Boot Start] w}ETRY(Vll  
  <\SystemRoot\System32\BIRD\ql1080.sys><QLogic Corporation> NT*jw|R  
[ql12160 / ql12160][Running/Boot Start] )8Fo1E%B@+  
  <\SystemRoot\System32\BIRD\ql12160.sys><QLogic Corporation> ^x6VtU}b  
[ql1280 / ql1280][Running/Boot Start] d23)NU;@^  
  <\SystemRoot\System32\BIRD\ql1280.sys><QLogic Corporation> I\;h,>egH  
[RAIDSRC / RAIDSRC][Stopped/Boot Start] >`>%A M=  
  <\SystemRoot\System32\BIRD\raidsrc.sys><Intel/ICP> ,~Th?W,Q  
[RR232X / RR232X][Stopped/Boot Start] mIYiHMM1  
  <\SystemRoot\System32\BIRD\rr232x.sys><HighPoint Technologies, Inc.> iN6WIs'  
[RsAntiSpyware / RsAntiSpyware][Running/Boot Start] Ly, m{Lc  
  <\SystemRoot\system32\drivers\RsBoot.sys><Beijing Rising Technology Co., Ltd.> =th-~<j  
[RsFwDrv / RsFwDrv][Running/Auto Start] K5K ` b.  
  <\??\C:\Program Files\Rising\Rfw\RsFwDrv.sys><Beijing Rising Technology Co., Ltd.> DfQWalh #  
[RsNTGDI / RsNTGDI][Running/Boot Start] H*J\l:%  
  <\SystemRoot\system32\Drivers\RsNTGdi.sys><Beijing Rising Technology Co., Ltd.> Z.l|U$2  
[RSPPSYS / RSPPSYS][Running/Auto Start] f-HL|G_
  
  <\??\C:\PROGRAM FILES\RISING\RAV\RSPPSYS.sys><Rising> m{veL  
[Realtek RTL8139/810x/8169/8110 all in one NDIS XP Driver / RTL8023xp][Running/Manual Start] e"%)ITVd  
  <system32\DRIVERS\Rtlnicxp.sys><Realtek Semiconductor Corporation> FoSCsn5  
[Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Stopped/Manual Start] ?6CG\Hs  
  <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation> 5(e$MF({  
[S150SX8 / S150SX8][Running/Boot Start] cNd\V8  
  <\SystemRoot\System32\BIRD\S150sx8.sys><Promise Technology, Inc.> GgW95X.  
[Secdrv / Secdrv][Stopped/Manual Start] 1x=(R[}V  
  <system32\DRIVERS\secdrv.sys><N/A> aRdMIj#  
[SI3112 / SI3112][Stopped/Boot Start] 87(3aSb0P  
  <\SystemRoot\System32\BIRD\SI3112.sys><Silicon Image, Inc.> ,qI}\9W8P!  
[sym_u3 / sym_u3][Running/Boot Start] /qUhcT  
  <\SystemRoot\System32\BIRD\sym_u3.sys><LSI Logic> +Io3`hI  
[TwoTrack Compatible Device / TwoTrack][Stopped/Manual Start] u>.|if  
  <System32\DRIVERS\TwoTrack.sys><IBM Corporation> ~"ogE  
==================================

引用

7lM28z}  
浏览器加载项 ]-b%jYlg%  
[Thunder Browser Helper] kx@gL|  
  {06849E9E-C8D7-4D59-B87D-784B7D6BE0B3} <D:\迅雷\ComDlls\XunLeiBHO_007.dll, Thunder Networking Technologies,LTD> +PzHqNw  
[AcroIEHlprObj Class] x0m{^&o2>  
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated> lt9mVx$?  
[启动迅雷5] ]< fEiC>  
  {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <D:\迅雷\Thunder.exe, Thunder Networking Technologies,LTD> nr6W3J94  
[豪杰超级解霸V8] ZGl<zsE  
  {367E0A21-8601-4986-9C9A-153BF5ACA118} <D:\豪杰超级解霸V8\STHSDVD.EXE, N/A> >cqjqS  
[信息检索(&R)]
V' F4^,  
  {92780B25-18CC-41C8-B9BE-3C9C571A8263} <C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL, Microsoft Corporation> 
7{
Wu<L  
[Windows Genuine Advantage Validation Tool] ?DsUujkF  
  {17492023-C23A-453E-A040-C7C580BBF700} <C:\WINDOWS\system32\LegitCheckControl.DLL, Microsoft Corporation> \n!hIxK"~  
[Tencent Safety Online Base Module] Xi6\~8/  
  {C09B522F-8AED-4E21-A65C-DC1AB652BAEE} <C:\WINDOWS\DOWNLO~1\TSOBase.ocx, Tencent Corporation> GM{_"5_2  
[ScienceWord Control 5.0] IS8D2<p  
  {C29E7AB7-8C79-421A-AB75-0AE00E848C2D} <C:\WINDOWS\system32\SCIENC~1.OCX, Novoasoft Corporation> b2$_S[+  
[Shockwave Flash Object] Z2GX@u,  
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.> JK^wZ=DT  
[CPasswordEditCtrl Object] ]e(@SsaS?d  
  {E787FD25-8D7C-4693-AE67-9406BC6E22DF} <C:\WINDOWS\system32\qqedit\qqedit.dll, 腾讯科技（深圳）有限公司> <b+;lv&Z=  
[Thunder Browser Helper] ;Vw\/e  
  {06849E9E-C8D7-4D59-B87D-784B7D6BE0B3} <D:\迅雷\ComDlls\XunLeiBHO_007.dll, Thunder Networking Technologies,LTD> 4,K.kG+  
[AcroIEHlprObj Class] <xO0
i `O3  
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated> 7N>)lzJn  
[HTML Document] ]-.$79J  
  {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A> Y)'CAx  
[Windows Media Player] YV cYUuh  
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> 4_I Wdk^   
[Thunder Browser Helper] m=!cA6H  
  {889D2FEB-5411-4565-8998-1DD2C5261283} <D:\迅雷\ComDlls\XunLeiBHO_007.dll, Thunder Networking Technologies,LTD> 1 z@}3R  
[SearchAssistantOC] R;(5:16N  
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A> 3e;9WXV$  
[AUDIO__MP3 Moniker Class] C>xHhy"d  
  {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> & V} h/v  
[VIDEO__X_MS_ASF Moniker Class] 4*# q&  
  {CD3AFA8F-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> GcD /
"h  
[Shockwave Flash Object] ma]A&  
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.> }3;`_|  
[&使用迅雷下载] r_H$lH  
  <D:\迅雷\Program\geturl.htm, N/A> >A(<_'u  
[&使用迅雷下载全部链接] y42%`SBo  
  <D:\迅雷\Program\getallurl.htm, N/A> _SB`\g%  
[上传到QQ网络硬盘] D6G
hp3_  
  <E:\Q\AddToNetDisk.htm, N/A> vx)H-JS0.0  
[导出到 Microsoft Office Excel(&X)] TXHvk3z[  
  <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A> M<1>Q5%1  
[添加到QQ自定义面板] 0b8Y#Gx@  
  <E:\Q\AddPanel.htm, N/A> Q[|djvq  
[添加到QQ表情] 6WVniv`fA  
  <E:\Q\AddEmotion.htm, N/A> ` yHY v7  
[用QQ彩信发送该图片] z"be"BML  
  <E:\Q\SendMMS.htm, N/A> ;}D o0  
[豪杰超级解霸V8实时播放] )gNx}Izi  
  <D:\豪杰超级解霸V8\MPURLGET.HTM, N/A> :bZ ?%Ol  
.^.&fU`  
==================================

引用

CykkA`J2hI  
正在运行的进程 &mpOp$1V  
[PID: 712][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] HIu+H"  
[PID: 776][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] #~.DtAK  
[PID: 292][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] P`
dmmI  
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10] auggbMH9K$  
[C:\Syswm1j\Ghook.dll] [N/A, ] |a (+(ja  
[PID: 320][e:\program files\rising\rfw\RfwMain.exe] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 70] JX5^$}L  
[e:\program files\rising\rfw\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 33] RWZ"#E-  
[e:\program files\rising\rfw\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] \ -%.kt  
[e:\program files\rising\rfw\RfwCtrl.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11] }K|iR(+  
[e:\program files\rising\rfw\RsXML.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2] ^yGqgD  
[e:\program files\rising\rfw\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] e(Wbx>  
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10] Fl)xu&""n  
[C:\Syswm1j\Ghook.dll] [N/A, ] 31"wUYKcv  
[C:\DOCUME~1\李牧原\LOCALS~1\Temp\Qqzo0.dll] [N/A, ] -"fFKUPQ  
[PID: 1164][C:\Program Files\ATI Technologies\ATI.ACE\cli.exe] [ATI Technologies Inc., 1.11.0.0] @ S25')  
[C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 1.1.4322.573] !q*3'g}CER  
[C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll] [Microsoft Corporation, 1.1.4322.573] 'L-s   
[C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] nZa',g~>P  
[C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll] [Microsoft Corporation, 1.1.4322.573] nvBj|@4"  
[c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll] [Microsoft Corporation, 1.1.4322.573] $yGy_7;z  
[c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_422c3599\mscorlib.dll] [N/A, ] sts ?Di  
[C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll] [Microsoft Corporation, 1.1.4322.573] `#D0 J  
[C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSCORJIT.DLL] [Microsoft Corporation, 1.1.4322.573] 74O4KkVH  
[c:\windows\assembly\gac\system.windows.forms\1.0.5000.0__b77a5c561934e089\system.windows.forms.dll] [Microsoft Corporation, 1.1.4322.573] FNh'giD  
[c:\windows\assembly\nativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_14cb2b7b\system.windows.forms.dll] [N/A, ] t[ <yi/  
[c:\program files\ati technologies\ati.ace\cli.implementation.dll] [ATI Technologies Inc., 1.2.2114.465] IurP;  
[c:\program files\ati technologies\ati.ace\log.foundation.dll] [ATI Technologies Inc., 1.2.2026.29944] vUPz#Lq1k  
[c:\program files\ati technologies\ati.ace\cli.foundation.dll] [ATI Technologies Inc., 1.2.2026.29944] O)33uL$:  
[c:\program files\ati technologies\ati.ace\log.foundation.service.dll] [ATI Technologies Inc., 1.2.2114.464] :(^IlL>x  
[c:\program files\ati technologies\ati.ace\log.foundation.shared.dll] [ATI Technologies Inc., 1.2.2026.29970] &Sa%|&Lz  
[c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll] [Microsoft Corporation, 1.1.4322.573] O/dt(Cc  
[c:\windows\assembly\nativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_96df10ff\system.dll] [N/A, ] rb9O{.&T  
[c:\program files\ati technologies\ati.ace\cli.foundation.xmanifestation.dll] [ATI Technologies Inc., 1.2.2114.464] *|tj?7'h
 
[c:\windows\assembly\gac\system.xml\1.0.5000.0__b77a5c561934e089\system.xml.dll] [Microsoft Corporation, 1.1.4322.573] G@4GzDJ  
[c:\windows\assembly\nativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_b39e651e\system.xml.dll] [N/A, ] |ezt{4;y  
[c:\windows\assembly\gac\system.runtime.remoting\1.0.5000.0__b77a5c561934e089\system.runtime.remoting.dll] [Microsoft Corporation, 1.1.4322.573] MOg|:m9j-  
[C:\WINDOWS\system32\ldmedia4.dll] [N/A, ] \x|je B  
[c:\program files\ati technologies\ati.ace\cli.component.runtime.dll] [ATI Technologies Inc., 1.2.2114.465]
&S;Q+@1  
[c:\program files\ati technologies\ati.ace\aem.foundation.dll] [ATI Technologies Inc., 1.2.2026.29944] GWA5mVC4E  
[c:\windows\assembly\gac\system.drawing\1.0.5000.0__b03f5f7f11d50a3a\system.drawing.dll] [Microsoft Corporation, 1.1.4322.573] @d#W4  
[c:\windows\assembly\nativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_d3d144b1\system.drawing.dll] [N/A, ] MddM/AU  
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [N/A, ] z
BYJB  
[c:\program files\ati technologies\ati.ace\cli.caste.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2114.456] \`lAx>_Uy  
[c:\program files\ati technologies\ati.ace\cli.component.runtime.shared.dll] [ATI Technologies Inc., 1.2.2026.29946] jE!mWAXpk  
[c:\program files\ati technologies\ati.ace\cli.caste.graphics.shared.dll] [ATI Technologies Inc., 1.2.2028.21076] U$..XF0  
[c:\program files\ati technologies\ati.ace\dem.foundation.dll] [ATI Technologies Inc., 1.2.2026.29944] mM+RCAB~  
[c:\program files\ati technologies\ati.ace\dem.graphics.displaysmanager.shared.dll] [ATI Technologies Inc., 1.2.2026.29945] McwlmJ
$jB  
[c:\program files\ati technologies\ati.ace\dem.graphics.demosinfo.dll] [ATI Technologies Inc., 1.2.2026.29947] cm9WaSFuv  
[C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\perfcounter.dll] [Microsoft Corporation, 1.1.4322.573] :Gdyo5|  
[c:\program files\ati technologies\ati.ace\dem.graphics.demosadapterinfo.dll] [ATI Technologies Inc., 1.2.2026.29960] 8b En  
[c:\program files\ati technologies\ati.ace\dem.graphics.dematiadapterinfo.dll] [ATI Technologies Inc., 1.2.2095.19505] {!BrH U_6  
[c:\program files\ati technologies\ati.ace\dem.graphics.demdriversettings.dll] [ATI Technologies Inc., 1.2.2026.29947] x%I{]jsv~  
[C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll] [Microsoft Corporation, 1.1.4322.573] \86I~aU  
[c:\windows\assembly\gac\system.web\1.0.5000.0__b03f5f7f11d50a3a\system.web.dll] [Microsoft Corporation, 1.1.4322.573] _6!<sX+J  
[PID: 1152][D:\Program Files\CyberLink\PowerDVD\PDVDServ.exe] [Cyberlink Corp., 6.00.1027] ficme[TN  
[D:\Program Files\CyberLink\PowerDVD\CLRCEngine2.dll] [CyberLink Corp., 3.2.2021 ] BGd