首页 > 显示器 >

nbservice.exe 电脑诊所电脑爱好者论坛

电脑杂谈　发布时间：2017-04-15 14:17:22　来源：网络整理

nbservice.exenbservice.exe

2012-03-16,22:20:47

SysLog Scanner 3.1 - build 20100608

Arswp ()

Windows XP Professional Service Pack 3 (build 2600)

================================================================

注册项

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

<360sd> <"C:\Program Files\360\360sd\360sd.exe" /autorun> [(Verified)360.cn, 3, 0, 0, 3032]

<Fetion> <D:\Program Files\Fetion\Fetion.exe -t> [(Verified)China Mobile, 4, 7, 0800, 0]

<DeskCalc> <"c:\documents and settings\administrator\桌面\deskcalc pro\deskcalc.exe" /hide> [DeskCalc GbR, 4, 0, 11, 0]

<YY> <D:\Program Files\yy-4\yylauncher.exe> [(Verified)广州多玩信息技术, 1.0.0.1]

<AdobeBridge> <> []

<QQ2009> <"D:\Program Files\Tencent\QQ\Bin\QQ.exe" /background> [(Verified)Tencent, 1, 70, 2421, 0]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

<360Safetray> <"C:\Program Files\360\360Safe\safemon\360Tray.exe" /start> [(Verified)360.cn, 7, 7, 0, 1051]

<eLiveSafe> <"D:\Program Files\eLive\PlugIns\Safe\beikeloader.exe" -launchedbylogin> [(Verified)贝壳网际（北京）安全技术, 2009.10.11.35]

<NvCplDaemon> <RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105) | (Verified)NVIDIA Corporation, 6.14.12.8026]

<NvMediaCenter> <RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105) | (Verified)NVIDIA Corporation, 6.14.12.8026]

<> <> []

<Acrobat Assistant 8.0> <"D:\Program Files\PS\Acrobat 10.0\Acrobat\Acrotray.exe"> [(Verified)Adobe Systems Inc., 10.1.2.45"]

<ZyngaGamesAgent> <"C:\Program Files\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe"> [(Verified)Splashtop Inc., 1.0.4.0]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]

<Userinit> <C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd]

<StartupPrograms> <rdpclip> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders]

<SecurityProviders> <msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll> [(Verified)Microsoft Corporation, 6.00.7755 | (Verified)Microsoft Corporation, 5.1.2600.6175 (xpsp_sp3_qfe.111116-1647) | (Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105) | (Verified)Microsoft Corporation, 6.1.1825.0]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify]

<LBTWlgn> <c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll> [(Verified)Logitech, Inc., 5.30.67]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components]

<aetsprov> <C:\WINDOWS\system32\regsvr32.exe /s C:\WINDOWS\system32\aetsprov.dll> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105) | A.E.T. Europe B.V., 3.0.0.2121]

<{44BBA842-CC51-11CF-AAFA-00AA00B6015B}> <rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Remove.PerUser.NT> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105) | (Verified)Microsoft Corporation, 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339) | (Verified)N/A]

<{5945c046-1e7d-11d1-b4-00c04fd912be}> <rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105) | (Verified)Microsoft Corporation, 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339) | (Verified)N/A]

<{6BF52A52-394A-11d3-B153-00C04F79FAA6}> <rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp10.inf,PerUserStub> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105) | (Verified)Microsoft Corporation, 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339) | (Verified)N/A]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions]

<{814953B0-3DE7-4171-A0DD-A7A38322B6C7}> <D:\Program Files\Fetion\\Fetion.exe> [(Verified)China Mobile, 4, 7, 0800, 0]

<{95B3F550-91-4627-BC-521288C52977}> <D:\Program Files\PPTV\PPLive.exe> [(Verified)PPLive Corporation, 3,1,4,3339]

<{9A0B0581-B14C-4d09-A3C6-7142D9A2CACC}> <D:\Program Files\碗豆荚\openwdj.html> [N/A]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt]

<&使用&迅雷下载> <C:\Program Files\Thunder Network\Thunder\BHO\geturl.htm> [N/A]

<&使用&迅雷下载全部链接> <C:\Program Files\Thunder Network\Thunder\BHO\GetAllUrl.htm> [N/A]

<&使用&迅雷离线下载> <C:\Program Files\Thunder Network\Thunder\BHO\OfflineDownload.htm> [N/A]

<&使用115优蛋下载> <D:\115\UDown\getUrl.htm> [N/A]

<&使用115优蛋下载全部链接> <D:\115\UDown\getAllUrl.htm> [N/A]

<使用迅雷看看播放器播放> <C:\Documents and Settings\All Users\Application Data\Thunder Network\XMP4\Core\Program\XmpIEMenu.htm> [N/A]

<将链接目标转换为 Adobe PDF> <res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html> []

<将链接目标追加到现有的 PDF> <res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html> []

<添加到飞信表情> <res://D:\Program Files\Fetion\FetionExt.dll/202> []

<转换为 Adobe PDF> <res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html> []

<追加到现有的 PDF> <res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html> []

<通过飞信短信发送> <res://D:\Program Files\Fetion\FetionExt.dll/201> []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors]

<Adobe PDF Port Monitor> <AdobePDF.dll> [(Verified)Adobe Systems Inc, 10.1.0.519]

================================================================

启动组

[WanDouJiaHelper]

================================================================

任务计划

[360开机加速延迟启动任务计划.job]

<C:\WINDOWS\tasks\360开机加速延迟启动任务计划.job> <"C:\Program Files\360\360Safe\360speedld.exe" -delayrun> []

================================================================

组件

--------------------------------

Shell Extension

[HyperTerminal Icon Ext]

<{88895560-9AA2-1069-930E-00AA0030EBC8}> <C:\WINDOWS\system32\hticons.dll> [(Verified)Hilgraeve, Inc., 5.1.2600.0]

[任务栏和「开始」菜单]

<{0DF44EAA-FF21-4412-828E-260A8728E7F1}> <> []

[Microsoft Agent Character Property Sheet Handler]

<{143A62C8-C33B-11D1-84FE-00C04FA34A14}> <C:\WINDOWS\msagent\agentpsh.dll> []

[WinRAR shell extension]

<{B41DB860-8EE4-11D2-9906-E49FADC173CA}> <C:\Program Files\WinRAR\rarext.dll> [N/A]

[NvCpl DesktopContext Class]

<{A70C977A-BF00-412C-90B7-034C51DA2439}> <C:\WINDOWS\system32\nvcpl.dll> [(Verified)NVIDIA Corporation, 6.14.12.8026]

[Logitech Setpoint Extension]

<{DC70A5-2044-4c59-B806-DEFB9AE0DF7C}> <C:\Program Files\Logitech\SetPointP\kbcplext.dll> [(Verified)Logitech, Inc., 6.30.41]

[Desktop Explorer]

<{1CDB2949-8F65-4355-8456-263E7C208A5D}> <C:\Program Files\NVIDIA Corporation\nView\nvshell.dll> [(Verified)N/A]

[NeroCoverEd Live Icons]

<{97F68CE3-7146-45FF-BE24-D9A7DD7CB8A2}> <C:\Program Files\Nero\Nero 9\Nero CoverDesigner\CoverEdExtension.dll> [(Verified)Nero AG, 4.4.9.100]

[ShellFire extesnsion]

[360软件管家右键卸载 Shell Extension]

<{5E19C0CE-C02C-46c2-98C3-A2E12EDE0E17}> <C:\Program Files\360\360Safe\SoftMgr\SoftMgrExt.dll> [(Verified)360.cn, 1, 0, 0, 1010]

[Adobe.Acrobat.ContextMenu]

<{D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802}> <D:\Program Files\PS\Acrobat 10.0\Acrobat Elements\ContextMenu.dll> [(Verified)Adobe Systems Inc., 10.1.2]

[Tencent Browser Helper]

<{D8E08419-58F7-258C-C756-62B47EB93DF4}> <C:\Program Files\TENCENT\SSPlus\SAddr.dll> []

--------------------------------

ToolBar

[Adobe PDF]

<{47833539-D0C5-4125-9FA8-0819E2EAAC93}> <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll> [(Verified)Adobe Systems Incorporated, 10.1.2.45]

--------------------------------

Protocols

[]

<{6AFBC7-AA38-45EC-9634-D6D20B679EFC}> <d:\PROGRA~1\KuGou7\KUGOO3~1.OCX> [(Verified)广州酷狗计算机科技, 1.0.0.0]

--------------------------------

Context Menu

[Adobe.Acrobat.ContextMenu]

<{D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802}> <D:\Program Files\PS\Acrobat 10.0\Acrobat Elements\ContextMenu.dll> [(Verified)Adobe Systems Inc., 10.1.2]

[Cover Designer]

<{73FCA462-9BD5-4065-A73F-A8E5F6904EF7}> <C:\Program Files\Nero\Nero 9\Nero CoverDesigner\CoverEdExtension.dll> [(Verified)Nero AG, 4.4.9.100]

[Gokuai]

<{AEB6F97A-A60D-4B21-9D3C-687E490F227D}> <D:\Program Files\gokuai\GoKuaiMenuEx.dll> [(Verified)够快科技, 7.0.9.6]

[OpenFolder]

<{0DE1378D-F811-40E6-B60A-1CC56F57D3E9}> <D:\Program Files\wangwang\AliIMExt.dll> [(Verified)Alibaba software (Shanghai) Corporation., 1.0.0.1]

[PhoebeMenu]

<{637709FE-EEE0-41CE-9D-C0194CDFAFA4}> <D:\Program Files\Phoebe\PhoebeMenu.dll> [(Verified)网易, 1.0.0.1]

[Safe360Ext]

<{7C0F6D57-E799-4C8A-A319-8E2B4D724CF0}> <C:\Program Files\360\360Safe\Utils\shell360ext.dll> [(Verified)360.cn, 7, 5, 0, 1060]

[SD360]

<{086F171D-5ED1-4ED2-B736-CFF3AD6A128E}> <C:\Program Files\360\360sd\MenuEx.dll> [(Verified)360.cn, 3, 0, 0, 3013]

[Sync115ContextMenu]

<{2C6F1F7B-9CAF-4F7D-9CFA-B4F5C9235BDE}> <C:\Documents and Settings\Administrator\Application Data\115\Box\Sync115Ext.dll> [(Verified)广东雨林木风计算机科技, 1.0.0.2]

[WinRAR]

<{B41DB860-8EE4-11D2-9906-E49FADC173CA}> <C:\Program Files\WinRAR\rarext.dll> [N/A]

[{4C5A0DA6-C2DA-422D-89E1-457978AB87B5}]

[00nView]

<{1E9B04FB-F9E5-4718-997B-B8DA88302A48}> <C:\Program Files\NVIDIA Corporation\nView\nvshell.dll> [(Verified)N/A]

[NvCplDesktopContext]

<{A70C977A-BF00-412C-90B7-034C51DA2439}> <C:\WINDOWS\system32\nvcpl.dll> [(Verified)NVIDIA Corporation, 6.14.12.8026]

--------------------------------

BrowserHelperObject

[迅雷FLV视频嗅探及下载支持]

<{0EA37B17-6B8B-4085-8257-F3A4AA69C27A}> <C:\Program Files\Thunder Network\Thunder\BHO\XlBrowserAddin1.0.5.64.dll> [(Verified)深圳市迅雷网络技术, 1.0.5.64]

[Adobe PDF Link Helper]

<{18DF081C-E8AD-4283-A596-FA578C2EBDC3}> <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll> [(Verified)Adobe Systems Incorporated, 10.1.2.45]

[xiamistart Class]

<{658D2F-158A-46FB-8C96-B1C8F56DBBE9}> <C:\WINDOWS\system32\XIAMIP~1.DLL> [(Verified)XiaMi music, 0, 9, 0, 10]

[迅雷下载支持]

<{889D2FEB-5411-4565-8998-1DD2C5261283}> <C:\Program Files\Thunder Network\Thunder\BHO\XunleiBHO7.2.3.3254.dll> [(Verified)深圳市迅雷网络技术, 7,2,3,3254]

[Adobe PDF Conversion Toolbar Helper]

<{AE7CD045-E861-484f-8273-0445EE161910}> <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll> [(Verified)Adobe Systems Incorporated, 10.1.2.45]

[SafeMon Class]

<{B69F34DD-F0F9-42DC-9EDD-957187DA688D}> <C:\Program Files\360\360Safe\safemon\safemon.dll> [(Verified)360.cn, 7, 0, 1, 1070]

--------------------------------

ActiveX Extension

[AliCertDOCtrl Class]

<{08D512D2-7D97-4E22-B7DB-82791106C086}> <C:\Documents and Settings\Administrator\Application Data\alipay\cf\alicdo.dll> [(Verified)Alipay, 1.0.0.1]

[迅雷FLV视频嗅探及下载支持]

<{0EA37B17-6B8B-4085-8257-F3A4AA69C27A}> <C:\Program Files\Thunder Network\Thunder\BHO\XlBrowserAddin1.0.5.64.dll> [(Verified)深圳市迅雷网络技术, 1.0.5.64]

[InfosecCertInstall Class]

[Adobe PDF Link Helper]

<{18DF081C-E8AD-4283-A596-FA578C2EBDC3}> <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll> [(Verified)Adobe Systems Incorporated, 10.1.2.45]

[InstallHelper Class]

<{1DABF8D5-8430-4985-9B7F-A30E53D709B3}> <D:\Program Files\Tencent\QQ\Plugin\Com.Tencent.QQMusic\bin\QQMusic\MMInstaller.dll> [(Verified)Tencent, 8.13.4822.0]

[iTrusPTA Class]

<{1E0DFFCF-27FF-4574-849B-55007349FEDA}> <C:\WINDOWS\system32\itruscert\PTA.dll> [(Verified)iTruschina Co., Ltd., 2, 5, 5, 2]

[Axcleanctrl Class]

[PassGuard Class]

<{3A2C8BC3-5B68-4AE5-81D6-6DC378708F3E}> <C:\WINDOWS\system32\MicroDone\PassGuard\PassGuardCtrl.dll> [(Verified)TODO: <Company name>, 1.0.1.0]

[GDGetTokenInfo Class]

[Adobe PDF]

<{47833539-D0C5-4125-9FA8-0819E2EAAC93}> <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll> [(Verified)Adobe Systems Incorporated, 10.1.2.45]

[Agent Class]

<{485463B7-8FB2-4B3B-B29B-8B919B0EACCE}> <C:\Program Files\Thunder Network\Thunder\BHO\ThunderAgent7.2.3.3254.dll> [(Verified)深圳市迅雷网络技术, 7,2,3,3254]

[EditCtrl Class]

[pop Control]

<{529E57DE-0F2C-4568-B8C6-F1F89C0A3C39}> <C:\WINDOWS\system32\AgpSafeControl.ocx> [(Verified)-, 1.6.35.2]

[WangWangX Class]

<{5D09DD40-CD-4C56-B615-0D1E3B357C2B}> <D:\Program Files\wangwang\AliIMX.dll> [(Verified)Alibaba software (Shanghai) Corporation., 1.0.0.1]

[迅雷发行IE支持]

<{5FFF24BC-DC02-4808-B4E0-A8E2C93FE407}> <C:\Program Files\Thunder Network\Thunder\BHO\xlfxctrl1.0.1.64.dll> [(Verified)深圳市迅雷网络技术, 1.0.1.64]

[xiamistart Class]

<{658D2F-158A-46FB-8C96-B1C8F56DBBE9}> <C:\WINDOWS\system32\XIAMIP~1.DLL> [(Verified)XiaMi music, 0, 9, 0, 10]

[Access UserInfo by Script]

<{6EE9CD3E-A386-4DAE-9737-A759DBF927AE}> <C:\Program Files\Thunder Network\Thunder\BHO\UserAgent1.0.2.10.dll> [(Verified)深圳市迅雷网络技术, 1.0.1.7]

[AxInputControl Class]

[CertEnroll Class]

<{7978461C-CC22-48F2-BC69-02220D3E101D}> <C:\WINDOWS\system32\itruscert\itrusenroll.dll> [(Verified)iTruschina Co., Ltd., 1, 0, 0, 7]

[GDGetVer Class]

[XunleiBHO Class]

<{802F530B-A8F6-4631-AE49-6BACAAC6373E}> <C:\Program Files\Thunder Network\Thunder\BHO\XunleiBHO7.2.3.3254.dll> [(Verified)深圳市迅雷网络技术, 7,2,3,3254]

[360SafeLive]

<{87515F61-A66C-4319-A0E0-D416CB8059E3}> <C:\Program Files\360\360Safe\Safelive.dll> [(Verified)360.cn, 2, 0, 1, 1019]

[AxSubmitControl Class]

[IEKeyControl Class]

<{93E730CA-32AA-4C56-B5FB-65932E954CFE}> <C:\WINDOWS\system32\IE_FULL_SCREEN.dll> [(Verified)Industrial and Commercial Bank of China, 1.0.0.1]

[OFrameObject Class]

<{9701758C-4373-482E-B13C-776C048EC890}> <C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.3.7201.416.(399).dll> [(Verified)ShenZhen Thunder Networking Technologies Ltd., 2, 3, 7201, 416]

[VersionDetector Class]

<{9EFF1953-9694-47B1-AEF6-B2A3FE8BFE9B}> <C:\Program Files\Common Files\Thunder Network\KanKan\vd.1.1.0.32.(700).dll> [(Verified)ShenZhen Thunder Networking Technologies,Ltd., 1, 1, 0, 32]

[APlayer Control]

<{A9322148-C691-4B9D-91FC-B961DBE9DD}> <C:\Program Files\Common Files\Thunder Network\APlayer\APlayer_001.dll> [(Verified)ShenZhen Thunder Networking Technologies, LTD, 2.5.3.409]

[LiveDapCtrl Class]

<{ACACC6EB-1FBA-4E13-A729-53AEB2DF54F9}> <C:\Program Files\Common Files\Thunder Network\KanKan\LiveDapCtrl.1.0.0.10.(288).dll> [(Verified)ShenZhen Thunder Networking Technologies Ltd., 1, 0, 0, 10]

[InfoSecICBCNetSign Class]

<{B1FBC1AD-5644-4084-882A-0F8BA85E7506}> <C:\WINDOWS\DOWNLO~1\ICBC_N~1.DLL> [(Verified)Infosec Technologies Co., Ltd., 1, 0, 75, 7]

[UnionPin Class]

<{B64A48FE-7B76-47A9-994A-9024D4AEA39F}> <C:\WINDOWS\Downloaded Program Files\cmpaySSClient.ocx> [(Verified)江南科友, 1, 0, 1, 3]

[SafeMon Class]

<{B69F34DD-F0F9-42DC-9EDD-957187DA688D}> <C:\Program Files\360\360Safe\safemon\safemon.dll> [(Verified)360.cn, 7, 0, 1, 1070]

[Google Update Plugin]

<{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}> <C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Update\1.3.21.69\npGoogleUpdate3.dll> [(Verified)Google Inc., 1.3.21.69]

[Shockwave Flash Object]

<{D27CDB6E-AE6D-11CF-96B8-444553540000}> <C:\WINDOWS\system32\Macromed\Flash\Flash11g.ocx> [(Verified)Adobe Systems, Inc., 11,1,102,63]

[Tencent Browser Helper]

<{D8E08419-58F7-258C-C756-62B47EB93DF4}> <C:\Program Files\TENCENT\SSPlus\SAddr.dll> []

[xoliimpl Class]

<{DD5BF6D1-6663-47E0-9DFA-5C343CAF178E}> <C:\WINDOWS\xinstaller.dll> [(Verified)深圳市迅雷技术, 1, 3, 0, 22]

[PlayerCtrl Class]

<{E05BC2A3-9A46-4a32-80C9-023A473F5B23}> <D:\Program Files\Tencent\QQ\Plugin\Com.Tencent.QQMusic\bin\QQMusic\QzoneMusic.dll> [(Verified)Tencent, 7.84.1995.401]

[]

[IcbcSslCacheCleanerCtrl Class]

<{E9707834-5BF7-4CFF-A639-398427DE1991}> <C:\WINDOWS\Downloaded Program Files\IcbcSslCacheCleaner.dll> [中国工商银行, 1.0.0.2]

[SSOForPTLogin2 Class]

[PPLive Lite Class]

[iTrusHwPTA Class]

<{EF7BC8AC-5BDC-4AED-AD63-A9B3AE7A768C}> <C:\WINDOWS\system32\itruscert\hwpta.dll> [(Verified)iTruschina Co., Ltd., 1, 1, 0, 14]

[StormAxPlayer Class]

<{F587310D-5306-494D-87E2-88334B46E781}> <C:\Program Files\StormII\webplayer\PlayerShell.dll> [(Verified)北京暴风网际科技, 1, 0, 0, 1218]

[webmod Class]

<{FEE3C8C5-9BEA-4079-AB36-63ECABFC7392}> <D:\Program Files\wangwang\alidcp.dll> [(Verified)Alipay.com Co.,Ltd, 2, 0, 0, 1]

================================================================

服务

[SwitchBoard / SwitchBoard][Stopped/Manual Start]

<"C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe">[Adobe Systems Incorporated, 2.0.13.7486]

[360 杀毒实时防护服务 / 360rp][Stopped/Auto Start]

<"C:\Program Files\360\360sd\360rps.exe">[(Verified)360.cn, 3, 0, 0, 3013]

[eLive Security Service / eLiveSafe][Stopped/Manual Start]

<"D:\Program Files\eLive\PlugIns\Safe\elivesafe.exe">[(Verified)贝壳网际（北京）安全技术, 2009.10.11.35]

[Logitech Bluetooth Service / LBTServ][Stopped/Manual Start]

<C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe>[(Verified)Logitech, Inc., 5.30.67]

[Nero BackItUp Scheduler 4.0 / Nero BackItUp Scheduler 4.0][Stopped/Manual Start]

<C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe>[(Verified)Nero AG, 4.2.3.100]

[NVIDIA Driver Helper Service / NVSvc][Running/Auto Start]

<%SystemRoot%\system32\nvsvc32.exe>[(Verified)NVIDIA Corporation, 6.14.12.8026]

[NVIDIA Update Service Daemon / nvUpdatusService][Stopped/Manual Start]

<C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe>[(Verified)NVIDIA Corporation, 1.4.28.0]

[Splashtop Connect Service / SCBackService][Running/Auto Start]

<C:\Program Files\Splashtop\Splashtop Connect\BackService.exe>[(Verified)Splashtop Inc., 1.0.4.0]

[Sony Ericsson PCCompanion / Sony Ericsson PCCompanion][Stopped/Manual Start]

<"C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe">[(Verified)Avanquest Software, 1.0.0.0]

[Splashtop Software Updater Service / SSUService][Stopped/Manual Start]

<C:\Program Files\Splashtop\Splashtop Software Updater\SSUService.exe>[(Verified)Splashtop Inc., 1.5.6.1]

[Splashtop Connect Firefox Software Updater Service / WCUService_STC_FF][Running/Auto Start]

<C:\Program Files\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe>[(Verified)Splashtop Inc., 1.1.7.1 ]

[XLServicePlatform / XLServicePlatform][Stopped/Manual Start]

<%SystemRoot%\system32\svchost -k XLServicePlatform --> "C:\Program Files\Common Files\Thunder Network\ServicePlatform\XLSP.dll">[(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111) | (Verified)深圳市迅雷网络技术, 1.0.1.260]

[主动防御 / ZhuDongFangYu][Running/Auto Start]

<"C:\Program Files\360\360Safe\deepscan\zhudongfangyu.exe">[(Verified)360.cn, 3, 2, 2, 2010]

================================================================

驱动

[AmdK8 Compatible Device / AmdK8][Stopped/Manual Start]

<System32\drivers\amdk8.sys>[Advanced Micro Devices, 1.3.2 (dnsrv(wmbla).060701-2226)]

[gdrv / gdrv][Stopped/Manual Start]

<\??\C:\WINDOWS\gdrv.sys>[]

[mpfilt / mpfilt][Running/Manual Start]

<\??\C:\WINDOWS\system32\drivers\mpfilt.sys>[N/A]

[Netgroup Packet Filter / NPF][Stopped/Manual Start]

<system32\drivers\npf.sys>[Politecnico di Torino, 3, 0, 0, 18]

[Prolific2 Serial port driver / Ser2pl][Stopped/Manual Start]

<system32\DRIVERS\ser2pl.sys>[Prolific Technology Inc., 2.0.0.24]

[TCP/IP Protocol Driver / Tcpip][Running/System Start]

<system32\DRIVERS\tcpip.sys>[Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)]

[360AvFlt mini-filter driver / 360AvFlt][Running/Manual Start]

<system32\DRIVERS\360AvFlt.sys>[(Verified)360.cn, 1.1.0.1009]

[360Box mini-filter driver / 360Box][Running/System Start]

<system32\DRIVERS\360Box.sys>[(Verified)360安全中心, 1.1.0.1011]

[360netmon / 360netmon][Running/System Start]

<\??\C:\WINDOWS\system32\drivers\360netmon.sys>[(Verified)360.cn, 2.1.11.1011]

[360SelfProtection / 360SelfProtection][Running/System Start]

<system32\drivers\360SelfProtection.sys>[(Verified)360安全中心, 1, 0, 0, 1296]

[Ambfilt / Ambfilt][Stopped/Manual Start]

<system32\drivers\Ambfilt.sys>[(Verified)Creative, 5.10.00.4240]

[AMD USB 3.0 Hub Driver / amdhub30][Running/Manual Start]

<system32\DRIVERS\amdhub30.sys>[(Verified)Advanced Micro Devices, INC., 1.0.0.0052 built by: WinDDK]

[AMD Low Level Device Driver / AmdLLD][Running/Manual Start]

<system32\DRIVERS\AmdLLD.sys>[(Verified)AMD, Inc., 1.0.1.0]

[AMD USB 3.0 Host Controller Driver / amdxhc][Running/Manual Start]

<system32\DRIVERS\amdxhc.sys>[(Verified)Advanced Micro Devices, INC., 1.0.0.0052 built by: WinDDK]

[AtpKrnl / AtpKrnl][Running/Manual Start]

<System32\Drivers\AtpKrnl.sys>[(Verified), 3.00]

[BAPIDRV / BAPIDRV][Running/System Start]

<\??\C:\WINDOWS\system32\drivers\BAPIDRV.SYS>[(Verified)360.cn, 1.0.0.1036]

[DAEMON Tools Virtual Bus Driver / dtsoftbus01][Running/System Start]

<system32\DRIVERS\dtsoftbus01.sys>[(Verified)DT Soft Ltd, 4.40.0002.0210]

[EfiSystemMon / EfiMon][Running/System Start]

<System32\Drivers\Efimon.sys>[(Verified)360安全中心, 1, 0, 0, 1009]

[Creative AudioPCI (ES1371,ES1373) (WDM) / es1371][Stopped/Manual Start]

<system32\drivers\es1371mp.sys>[(Verified)Creative Technology Ltd., 5.1.2501.0 built by: WinDDK]

[USB Chip Holder Service / GDBaseSmc][Running/Manual Start]

[Microsoft 用于 High Definition Audio 的 UAA 总线驱动程序 / HDAudBus][Running/Manual Start]

<system32\DRIVERS\HDAudBus.sys>[(Verified)Windows (R) Server 2003 DDK provider, 5.10.01.5013 built by: WinDDK]

[HookPort / HookPort][Running/Boot Start]

<System32\Drivers\Hookport.sys>[(Verified)360安全中心, 1, 1, 0, 1010]

[Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Running/Manual Start]

<system32\drivers\RtkHDAud.sys>[(Verified)Realtek Semiconductor Corp., 5.10.0.6368 built by: WinDDK]

[Logitech Beep Suppression Driver / LBeepKE][Running/Auto Start]

<System32\Drivers\LBeepKE.sys>[(Verified)Logitech, Inc., 5.30.42.0]

[Logitech SetPoint KMDF HID Filter Driver / LHidFilt][Running/Manual Start]

<system32\DRIVERS\LHidFilt.Sys>[(Verified)Logitech, Inc., 5.30.42.0]

[Logitech SetPoint KMDF Mouse Filter Driver / LMouFilt][Running/Manual Start]

<system32\DRIVERS\LMouFilt.Sys>[(Verified)Logitech, Inc., 5.30.42.0]

[Logitech SetPoint KMDF USB Filter / LUsbFilt][Running/Manual Start]

<System32\Drivers\LUsbFilt.Sys>[(Verified)Logitech, Inc., 5.30.42.0]

[Monfilt / Monfilt][Stopped/Manual Start]

<system32\drivers\Monfilt.sys>[(Verified)Creative Technology Ltd., 5.10.0.4112]

[nv / nv][Running/Manual Start]

<system32\DRIVERS\nv4_mini.sys>[(Verified)NVIDIA Corporation, 6.14.12.8026]

[Service for NVIDIA High Definition Audio Driver / NVHDA][Running/Manual Start]

<system32\drivers\nvhda32.sys>[(Verified)NVIDIA Corporation, 1.2.23.3 built by: WinDDK]

[PassGuard / PassGuard][Running/Auto Start]

[AMD PCNET Compatable Adapter Driver / PCnet][Stopped/Manual Start]

<system32\DRIVERS\pcntpci5.sys>[(Verified)AMD Inc., 4.38.00 built by: WinDDK]

[Direct Parallel Link Driver / Ptilink][Running/Manual Start]

<system32\DRIVERS\ptilink.sys>[(Verified)Parallel Technologies, Inc., 1.10 (XPClient.010817-1148)]

[Quantum DeepScanner Servers / qutmdserv][Running/System Start]

<\??\C:\WINDOWS\system32\drivers\qutmdrv.sys>[(Verified)360.cn, 7.2.1.1001]

[qutmipc / qutmipc][Running/System Start]

<\??\C:\WINDOWS\system32\drivers\qutmipc.sys>[(Verified)360.cn, 6.9.0.1005]

[USB Token Holder Service / R5BaseSmc][Running/Manual Start]

<system32\DRIVERS\smccard.sys>[(Verified)OEM, 2, 5, 9, 1202]

[Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver / RTLE8023xp][Running/Manual Start]

<system32\DRIVERS\Rtenicxp.sys>[(Verified)Realtek Semiconductor Corporation , 5.782.0114.2011 built by: WinDDK]

[Secdrv / Secdrv][Stopped/Manual Start]

<system32\DRIVERS\secdrv.sys>[(Verified)Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K., 4.03.086]

[YLMF Virtual Diskette V1 / YLMFVDISK][Running/Auto Start]

<system32\drivers\VirtDisk.sys>[(Verified)N/A]

================================================================

活动进程

[PID: 804 / SYSTEM] \??\C:\WINDOWS\system32\winlogon.exe [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)]

C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]

c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [(Verified)Logitech, Inc., 5.30.67]

C:\WINDOWS\system32\freeime.ime [极点五笔工作室, 7.1.3.0]

[PID: 860 / SYSTEM] C:\WINDOWS\system32\lsass.exe [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)]

C:\WINDOWS\system32\UxTheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]

[PID: 1032 / SYSTEM] C:\WINDOWS\system32\svchost.exe [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]

C:\WINDOWS\system32\UxTheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]

[PID: 1100 / NETWORK SERVICE] C:\WINDOWS\system32\svchost.exe [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]

C:\WINDOWS\system32\UxTheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]

C:\WINDOWS\system32\ikutm.dll [(Verified)youku.com, 1, 0, 0, 7]

[PID: 1196 / SYSTEM] C:\WINDOWS\System32\svchost.exe [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]

C:\WINDOWS\System32\UxTheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]

C:\WINDOWS\system32\ikutm.dll [(Verified)youku.com, 1, 0, 0, 7]

[PID: 1348 / NETWORK SERVICE] C:\WINDOWS\system32\svchost.exe [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]

C:\WINDOWS\system32\UxTheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]

C:\WINDOWS\system32\ikutm.dll [(Verified)youku.com, 1, 0, 0, 7]

[PID: 1460 / LOCAL SERVICE] C:\WINDOWS\system32\svchost.exe [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]

C:\WINDOWS\system32\UxTheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]

C:\WINDOWS\system32\ikutm.dll [(Verified)youku.com, 1, 0, 0, 7]

[PID: 1476 / SYSTEM] C:\Program Files\360\360Safe\deepscan\zhudongfangyu.exe [(Verified)360.cn, 3, 2, 2, 2010]

C:\Program Files\360\360Safe\deepscan\cloudcom2.dll [(Verified)360.cn, 3, 2, 7, 6081]

C:\Program Files\360\360Safe\360leakfixplugin.dll [(Verified)360.cn, 1, 0, 0, 1003]

C:\Program Files\360\360Safe\SoftMgr\360SoftMgrS.dll [(Verified)360.cn, 2, 1, 6, 1182]

C:\Program Files\360\360Safe\deepscan\heavygate.dll [360.cn, 3, 7, 9, 2]

C:\Program Files\360\360Safe\deepscan\qutmload.dll [(Verified)360.cn, 6, 9, 0, 1033]

[PID: 1748 / SYSTEM] C:\WINDOWS\system32\spoolsv.exe [(Verified)Microsoft Corporation, 5.1.2600.6024 (xpsp_sp3_qfe.100817-1627)]

C:\WINDOWS\system32\UxTheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]

C:\WINDOWS\system32\AdobePDF.dll [(Verified)Adobe Systems Inc, 10.1.0.519]

[PID: 1816 / LOCAL SERVICE] C:\WINDOWS\System32\SCardSvr.exe [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)]

C:\WINDOWS\System32\UxTheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]

[PID: 120 / Administrator] C:\WINDOWS\Explorer.EXE [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]

C:\WINDOWS\system32\UxTheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]

C:\WINDOWS\system32\freeime.ime [极点五笔工作室, 7.1.3.0]

D:\Program Files\gokuai\GoKuaiMenuEx.dll [(Verified)够快科技, 7.0.9.6]

C:\Documents and Settings\Administrator\Application Data\115\Box\Sync115Ext.dll [(Verified)广东雨林木风计算机科技, 1.0.0.2]

C:\Program Files\360\360Safe\safemon\360UDiskGuard.dll [(Verified)360.cn, 2, 0, 0, 1007]

C:\Program Files\360\360Safe\safemon\safemon.dll [(Verified)360.cn, 7, 0, 1, 1070]

C:\Program Files\360\360Safe\safemon\iNetSafe.dll [(Verified)360.cn, 1, 0, 2, 1080]

C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll [(Verified)Adobe Systems, Inc., 10.1.2.45]

C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.CHS [N/A]

C:\WINDOWS\system32\shdoclc.dll [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]

[PID: 248 / Administrator] C:\Program Files\360\360Safe\safemon\360Tray.exe [(Verified)360.cn, 7, 7, 0, 1051]

C:\WINDOWS\system32\UxTheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]

C:\Program Files\360\360Safe\safemon\360compro.dll [(Verified)360.cn, 7, 2, 1, 1001]

C:\Program Files\360\360Safe\ipc\ipcservice.dll [(Verified)360.CN, 7, 1, 0, 1029]

C:\Program Files\360\360Safe\ipc\fileMgr.dll [(Verified)360.cn, 7, 0, 0, 1021]

C:\Program Files\360\360Safe\ipc\yhregd.dll [(Verified)360.cn, 7, 1, 0, 1007]

C:\Program Files\360\360Safe\ipc\appd.dll [(Verified)360.cn, 7, 3, 2, 1007]

C:\Program Files\360\360Safe\safemon\360traylive.dll [(Verified)360.cn, 8, 0, 0, 1031]

C:\Program Files\360\360Safe\safemon\360procmon.dll [(Verified)360.CN, 7, 0, 0, 1003]

C:\Program Files\360\360Safe\safemon\SelfProtectAPI2.dll [(Verified)360.CN, 6, 9, 0, 1011]

C:\Program Files\360\360Safe\safemon\360MobileBase.tpi [(Verified)360.cn, 1, 5, 0, 1502]

C:\Program Files\360\360Safe\safemon\360SafeCamera.tpi [(Verified)360.cn, 1, 0, 0, 1010]

C:\Program Files\360\360Safe\safemon\360safemonpro.tpi [(Verified)360.cn, 2, 0, 0, 1010]

C:\Program Files\360\360Safe\safemon\360TaskBar.tpi [(Verified)360.cn, 1, 0, 1, 1009]

C:\Program Files\360\360Safe\safemon\DsTpi.tpi [(Verified)360.cn, 1, 0, 0, 2004]

C:\Program Files\360\360Safe\safemon\MicroExamin.tpi [(Verified)360.cn, 8, 0, 0, 1001]

C:\Program Files\360\360Safe\safemon\Netm.tpi [(Verified)360.cn, 4, 3, 10, 1225]

C:\Program Files\360\360Safe\safemon\netmon.tpi [(Verified)360.cn, 5, 1, 0, 1023]

C:\Program Files\360\360Safe\safemon\obtracer.tpi [(Verified)360.cn, 6, 8, 0, 1107]

C:\Program Files\360\360Safe\safemon\AutoCleanTrash.tpi [(Verified)360.cn, 1, 0, 0, 1003]

C:\Program Files\360\360Safe\safemon\360TrayLogin.tpi [(Verified)360.cn, 2, 0, 0, 1051]

C:\WINDOWS\system32\ikutm.dll [(Verified)youku.com, 1, 0, 0, 7]

C:\Program Files\360\360Safe\deepscan\qutmload.dll [(Verified)360.cn, 6, 9, 0, 1033]

C:\Program Files\360\360Safe\ipc\qutmipc.dll [(Verified)360.cn, 7, 3, 0, 1027]

C:\Program Files\360\360Safe\deepscan\BAPI.dll [(Verified)360.cn, 2.0.0.1031]

C:\Program Files\360\360Safe\ipc\sbmon.dll [(Verified)360安全中心, 2, 0, 0, 1013]

C:\Program Files\360\360Safe\ipc\360box.dll [(Verified)360安全中心, 2, 0, 0, 1001]

C:\Program Files\360\360Safe\netmon\Netgm.dll [(Verified)360.cn, 2, 0, 1, 1030]

C:\Program Files\360\360Safe\MiniUI.dll [(Verified)360.cn, 7, 5, 2, 2151]

C:\Program Files\360\360Safe\safemon\360UDiskGuard.dll [(Verified)360.cn, 2, 0, 0, 1007]

C:\Program Files\360\360Safe\SafeLive.dll [(Verified)360.cn, 2, 0, 1, 1019]

C:\Program Files\360\360Safe\pdown.dll [(Verified)360.cn, 1, 3, 0, 1084]

C:\Program Files\360\360Safe\360Common.dll [(Verified)360.cn, 7, 3, 0, 1030]

C:\Program Files\360\360Safe\safemon\safemon.dll [(Verified)360.cn, 7, 0, 1, 1070]

C:\Program Files\360\360Safe\safemon\urlproc.dll [(Verified)360.cn, 2, 2, 0, 1010]

C:\Program Files\360\360Safe\deepscan\heavygate.dll [360.cn, 3, 7, 9, 2]

C:\Program Files\360\360Safe\netmon\3GIdentify.dll [(Verified)360.cn, 1, 0, 0, 1012]

C:\Program Files\360\360Safe\360Verify.dll [(Verified)360安全中心, 1, 0, 0, 1004]

C:\Program Files\360\360Safe\netmon\mobileflux.dll [(Verified)360.cn, 1, 0, 0, 1001]

C:\Program Files\360\360Safe\netmon\360netctrl.dll [(Verified)360.cn, 3, 2, 11, 1120]

C:\Program Files\360\360Safe\deepscan\Identify\Identify.dll [(Verified)360.cn, 1, 2, 0, 1001]

C:\Program Files\360\360Safe\netmon\sysmon.dll [(Verified)360.cn, 1, 0, 1, 1121]

C:\Program Files\360\360Safe\netmon\NetmonEP.dll [(Verified)360.cn, 2, 0, 0, 1001]

C:\Program Files\360\360Safe\deepscan\deepscan.dll [(Verified)360.cn, 3, 2, 8, 1051]

C:\Program Files\360\360Safe\LiveUpd360.dll [(Verified)360.cn, 1, 3, 0, 1084]

C:\Program Files\360\360Safe\360net.dll [(Verified)360.cn, 1, 2, 0, 1034]

C:\Program Files\360\360Safe\360P2SP.dll [(Verified)360.cn, 1, 3, 0, 1044]

C:\Program Files\360\360Safe\deepscan\Cloudcom2.dll [(Verified)360.cn, 3, 2, 7, 6081]

C:\Program Files\360\360Safe\ipc\PatchCheck.dll [(Verified)360.cn, 1, 1, 0, 1017]

C:\Program Files\360\360Safe\efiproc.dll [(Verified)奇虎360安全卫士, 1, 0, 0, 1005]

C:\Program Files\360\360Safe\deepscan\dsplus.dll [(Verified)360.cn, 1, 0, 0, 1020]

C:\WINDOWS\system32\aetsprov.dll [A.E.T. Europe B.V., 3.0.0.2121]

C:\WINDOWS\system32\MSVCP71.dll [Microsoft Corporation, 7.10.6030.0]

C:\WINDOWS\system32\MSVCR71.dll [Microsoft Corporation, 7.10.6030.0]

C:\WINDOWS\system32\aetpkss1.dll [A.E.T. Europe B.V., 3.0.0.2119]

C:\WINDOWS\system32\bxscard.dll [BlueX B.V., 4.2.5.1827]

C:\Program Files\360\360Safe\deepscan\360UC.dll [(Verified)360.cn, 1, 0, 0, 1010]

C:\Program Files\360\360Safe\360ver.dll [(Verified)360.cn, 8, 5, 0, 2001]

C:\Program Files\360\360Safe\safemon\360hipsPopWnd.dll [(Verified)360.cn, 7, 0, 0, 1037]

D:\Program Files\gokuai\GoKuaiMenuEx.dll [(Verified)够快科技, 7.0.9.6]

C:\Documents and Settings\Administrator\Application Data\115\Box\Sync115Ext.dll [(Verified)广东雨林木风计算机科技, 1.0.0.2]

[PID: 264 / Administrator] D:\Program Files\PS\Acrobat 10.0\Acrobat\Acrotray.exe [(Verified)Adobe Systems Inc., 10.1.2.45"]

C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]

D:\Program Files\PS\Acrobat 10.0\Acrobat\Locale\zh_CN\Acrotray.chs [N/A]

C:\WINDOWS\system32\freeime.ime [极点五笔工作室, 7.1.3.0]

[PID: 380 / Administrator] C:\WINDOWS\system32\ctfmon.exe [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)]

C:\WINDOWS\system32\UxTheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]

C:\WINDOWS\system32\freeime.ime [极点五笔工作室, 7.1.3.0]

[PID: 508 / Administrator] C:\Program Files\360\360sd\360sd.exe [(Verified)360.cn, 3, 0, 0, 3032]

C:\Program Files\360\360sd\CrashReport.dll [(Verified)360.cn, 3, 0, 0, 2121]

C:\WINDOWS\system32\ikutm.dll [(Verified)youku.com, 1, 0, 0, 7]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\ca87ba84221991839abbe7d4bc9c6721\mscorlib.ni.dll [Microsoft Corporation, 2.0.50727.3625 (GDR.050727-3600)]

C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]

C:\WINDOWS\system32\aetsprov.dll [A.E.T. Europe B.V., 3.0.0.2121]

C:\WINDOWS\system32\MSVCP71.dll [Microsoft Corporation, 7.10.6030.0]

C:\WINDOWS\system32\MSVCR71.dll [Microsoft Corporation, 7.10.6030.0]

C:\WINDOWS\system32\aetpkss1.dll [A.E.T. Europe B.V., 3.0.0.2119]

C:\WINDOWS\system32\bxscard.dll [BlueX B.V., 4.2.5.1827]

C:\WINDOWS\system32\freeime.ime [极点五笔工作室, 7.1.3.0]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\9e3803cd2a11f056291862e306a8e2b2\System.ni.dll [Microsoft Corporation, 2.0.50727.3631 (GDR.050727-3600)]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\9351cf29bb1ba951e45a9b3b0edab937\System.Drawing.ni.dll [Microsoft Corporation, 2.0.50727.3053 (netfxsp.050727-3000)]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\ad99ac6b5666edb8ee742dd64f9578af\System.Windows.Forms.ni.dll [Microsoft Corporation, 2.0.50727.3623 (GDR.050727-3600)]

D:\Program Files\碗豆荚\CoreUtils.dll [(Verified)Microsoft, 1.24.5.1420]

C:\Program Files\360\360Safe\safemon\safemon.dll [(Verified)360.cn, 7, 0, 1, 1070]

D:\Program Files\碗豆荚\Newtonsoft.Json.Net20.dll [Newtonsoft, 3.5.0.0]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\77e1279cbf4eecfb0284b63316fe43fe\System.Xml.ni.dll [Microsoft Corporation, 2.0.50727.3082 (QFE.050727-3000)]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data\ae888f8633fce3ff1de98e32bce0abbf\System.Data.ni.dll [Microsoft Corporation, 2.0.50727.3053 (netfxsp.050727-3000)]

C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll [Microsoft Corporation, 2.0.50727.3053 (netfxsp.050727-3000)]

C:\WINDOWS\system32\ikutm.dll [(Verified)youku.com, 1, 0, 0, 7]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\94a40f415bfa947e251888bbe88bb973\System.Configuration.ni.dll [Microsoft Corporation, 2.0.50727.3053 (netfxsp.050727-3000)]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\29bdc8352d3c26e3c572ea60639dec3b\System.Web.ni.dll [Microsoft Corporation, 2.0.50727.3634 (GDR.050727-3600)]

[PID: 1368 / SYSTEM] C:\WINDOWS\system32\nvsvc32.exe [(Verified)NVIDIA Corporation, 6.14.12.8026]

C:\WINDOWS\system32\nvapi.dll [(Verified)NVIDIA Corporation, 6.14.12.8026]

C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]

[PID: 1448 / SYSTEM] C:\Program Files\Splashtop\Splashtop Connect\BackService.exe [(Verified)Splashtop Inc., 1.0.4.0]

[PID: 1596 / SYSTEM] C:\WINDOWS\system32\svchost.exe [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]

C:\WINDOWS\system32\UxTheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]

[PID: 1656 / SYSTEM] C:\Program Files\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe [(Verified)Splashtop Inc., 1.1.7.1 ]

[PID: 3244 / Administrator] C:\Program Files\360\360sd\360rp.exe [(Verified)360.cn, 3, 0, 0, 3032]

C:\Program Files\360\360sd\CrashReport.dll [(Verified)360.cn, 3, 0, 0, 2121]

C:\Program Files\360\360Safe\deepscan\cloudcom2.dll [(Verified)360.cn, 3, 2, 7, 6081]

C:\Program Files\360\360Safe\deepscan\Bapi.dll [(Verified)360.cn, 2.0.0.1031]

C:\Program Files\360\360Safe\deepscan\heavygate.dll [360.cn, 3, 7, 9, 2]

C:\Program Files\360\360sd\QtQuart.dll [(Verified)360.cn, 3, 0, 0, 3031]

C:\Program Files\360\360sd\360AvFlt.dll [(Verified)360.cn, 1.1.0.1009]

C:\Program Files\360\360Safe\deepscan\CQhCltHttpW.dll [(Verified)360.cn, 1, 0, 5, 5084]

C:\Program Files\360\360sd\EI.dll [(Verified)360.cn, 1, 0, 0, 1011]

C:\Program Files\360\360sd\Engine.dll [(Verified)360.cn, 1, 0, 0, 1011]

C:\Program Files\360\360sd\360SignCheck.dll [(Verified)360.cn, 3, 0, 0, 2085]

C:\Program Files\360\360sd\pluginmgr.dll [(Verified)360.cn, 3, 0, 0, 2113]

C:\Program Files\360\360sd\immplugin\Dllhijack.dll [(Verified)360.cn, 3, 0, 0, 2123]

C:\Program Files\360\360sd\immplugin\LockAcad.dll [(Verified)360.cn, 3, 0, 0, 2121]

C:\Program Files\360\360sd\immplugin\PopTrojan.dll [(Verified)360.cn, 3, 0, 0, 2103]

C:\Program Files\360\360Safe\netmon\360netctrl.dll [(Verified)360.cn, 3, 2, 11, 1120]

C:\WINDOWS\system32\ikutm.dll [(Verified)youku.com, 1, 0, 0, 7]

C:\Program Files\360\360Safe\safemon\360Webpro.dll [(Verified)360.CN, 2, 1, 1, 1001]

C:\Program Files\360\360Safe\safemon\SomProxy.dll [(Verified)360.cn, 1, 0, 0, 1132]

[PID: 3804 / LOCAL SERVICE] C:\WINDOWS\System32\alg.exe [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852)]

C:\WINDOWS\System32\UxTheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]

C:\WINDOWS\system32\ikutm.dll [(Verified)youku.com, 1, 0, 0, 7]

[PID: 2324 / SYSTEM] C:\WINDOWS\System32\svchost.exe [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]

C:\WINDOWS\System32\UxTheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]

[PID: 3420 / Administrator] D:\arswp3_x86_DownG.com\arswp3\ArSwp3.exe [(Verified)Windows 清理助手, 3.1.6.0805]

C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]

C:\Program Files\360\360Safe\safemon\safemon.dll [(Verified)360.cn, 7, 0, 1, 1070]

D:\Program Files\gokuai\GoKuaiMenuEx.dll [(Verified)够快科技, 7.0.9.6]

C:\Documents and Settings\Administrator\Application Data\115\Box\Sync115Ext.dll [(Verified)广东雨林木风计算机科技, 1.0.0.2]

C:\WINDOWS\system32\freeime.ime [极点五笔工作室, 7.1.3.0]

C:\WINDOWS\system32\ikutm.dll [(Verified)youku.com, 1, 0, 0, 7]

C:\WINDOWS\system32\Macromed\Flash\Flash11g.ocx [(Verified)Adobe Systems, Inc., 11,1,102,63]

================================================================

文件关联

[.xlsx] <"D:\Program Files\office2010\Office14\EXCEL.EXE" /dde> [(Verified)Microsoft Corporation, 14.0.6112.5000]

[.zip] <"C:\Program Files\WinRAR\WinRAR.exe" "%1"> [N/A]

[.DAT] <"C:\WINDOWS\system32\PPTVLauncher.exe" "%1"> [(Verified)PPLive Corporation, 1, 0, 0, 1]

[.rar] <"C:\Program Files\WinRAR\WinRAR.exe" "%1"> [N/A]

[.eps] <"D:\Program Files\PS\Adobe Illustrator CS5.1\Support Files\Contents\Windows\Illustrator.exe" "%1"> [(Verified)Adobe Systems Inc., CS5.1]

[.apk] <"D:\Program Files\碗豆荚\ApkInstaller.exe" "%1"> [(Verified) , 1.24.5.1420]

[.MOV] <"C:\WINDOWS\system32\PPTVLauncher.exe" "%1"> [(Verified)PPLive Corporation, 1, 0, 0, 1]

[.url] <"D:\Program Files\Maxthon3\Bin\Maxthon.exe" "%1"> [(Verified)Maxthon International ltd., 3, 3, 4, 4000]

[.avi] <"C:\WINDOWS\system32\PPTVLauncher.exe" "%1"> [(Verified)PPLive Corporation, 1, 0, 0, 1]

[.ram] <"C:\WINDOWS\system32\PPTVLauncher.exe" "%1"> [(Verified)PPLive Corporation, 1, 0, 0, 1]

[.mod] <"c:\program files\thunder network\xmp\Program\XMP.exe" /play "%1" /ssopenfrom WndExplr /sstartfrom LocalFile > [(Verified)深圳市迅雷网络技术, 4, 8, 8, 966]

[.img] <"C:\Program Files\Nero\Nero 9\Nero Express\NeroExpress.exe" "%1"> [(Verified)Nero AG, 9, 4, 17, 100]

================================================================

Autorun.Inf

================================================================

Winsock提供者

[iKu Smart Network LSP over MSAFD Tcpip [TCP/IP]]

<C:\WINDOWS\system32\ikutm.dll> [(Verified)youku.com, 1, 0, 0, 7]

[iKu Smart Network LSP over MSAFD Tcpip [UDP/IP]]

<C:\WINDOWS\system32\ikutm.dll> [(Verified)youku.com, 1, 0, 0, 7]

[iKu Smart Network LSP]

<C:\WINDOWS\system32\ikutm.dll> [(Verified)youku.com, 1, 0, 0, 7]

================================================================