鐵之狂傲

標題: 這隻木馬該怎麼處理呢? [列印本頁]
作者: 查爾斯    時間: 08-2-14 20:45
標題: 這隻木馬該怎麼處理呢?
病毒名稱:Trojan.Farfil

中毒檔案:aayv43z9.sys、ewur6cnk.dll

位置:C:\WINDOWS\system32\ewur6cnk.dll
         C:\WINDOWS\system32\drivers\aayv43z9.sys

用賽門鐵客只能隔離砍不掉
那兩個檔案殺掉會有什麼影響嗎??
作者: 藤乃紫音    時間: 08-2-14 20:45
下載Icesword後進入到安全模式(重開機一直按F8就行)
http://gin77729.myweb.hinet.net/IceSword.rar

進入安全模式後執行Icesowrd，點選左邊的File，找到以下檔案後在檔案上按右鍵選擇"force delete"
c:\windows\system32\com\xafrjiktp.dll
C:\WINDOWS\system32\drivers\x0ua.sys
C:\WINDOWS\system32\drivers\nmpkg.sys
C:\WINDOWS\system32\DRIVERS\aayv43z9.sys

開啟SREng，點選"啟動專案"的"服務"(右邊分頁的最後一個)選擇左邊的"Win32服務應用程式"，找到下面東西後點選"刪除服務"後選擇"設置"，然後按"否"刪除該服務，注意，要按"否"才會刪除。
[Secondary Logon / seclogon]

開啟SREng，點選"啟動專案"的"服務"(右邊分頁的最後一個)選擇右邊的"驅動程式"，找到下面東西後點選"刪除服務"後選擇"設置"，然後按"否"刪除該驅動程式，注意，要按"否"才會刪除。
[aayv43z / aayv43z9]
[nmpkg / nmpkg]
[x0ua / x0ua]

完成後重開機再看看有沒有問題
作者: 迷糊小書僮    時間: 08-2-15 15:10
http://www.avpclub.ddns.info/discuz/thread-6565-1-1.html

照這個跑一份SREng上來吧
作者: 查爾斯    時間: 08-2-16 00:27
用那個跑出來的記事本貼上來嗎??
作者: 迷糊小書僮    時間: 08-2-16 00:30
沒錯

請全選複製
作者: 查爾斯    時間: 08-2-16 02:35

  2. 2008-02-16,02:30:44
  3. System Repair Engineer 2.5.16.900
  4. Smallfrogs (http://www.KZTechs.com)
  5. Windows XP Professional Service Pack 2 (Build 2600) - Administrative User - Completed Functions Allowed
  6. Follow item(s) have been choosed:
  7.     All Boot Items (Including Registry, Startup Folders, Services and so on)
  8.     Browser Add-ons
  9.     Runing Processes (Including process model information)
  10.     File Associations
  11.     Winsock Provider
  12.     Autorun.Inf
  13.     HOSTS File
  14.     Process Privileges Scan

  16. Boot Items
  17. Registry
  18. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  19.     <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Publisher]
  20.     <MsnMsgr><"C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background>  [(Verified)Microsoft Corporation]
  21.     <ezHelper><C:\Program Files\ezHelper\ezHelper.exe 300>  [N/A]
  22.     <Yahoo! Pager><"C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet>  [(Verified)Yahoo! Inc.]
  23. [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  24.     <load><>  [N/A]
  25.     <run><>  [N/A]
  26. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  27.     <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [(Verified)Microsoft Windows Publisher]
  28.     <PHIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [(Verified)Microsoft Windows Publisher]
  29.     <PHIME2002A><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [(Verified)Microsoft Windows Publisher]
  30.     <IgfxTray><C:\WINDOWS\System32\igfxtray.exe>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
  31.     <HotKeysCmds><C:\WINDOWS\System32\hkcmd.exe>  [N/A]
  32.     <SoundMan><SOUNDMAN.EXE>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
  33.     <Ulead AutoDetector v2><C:\Program Files\Common Files\Ulead Systems\AutoDetector\monitor.exe>  [Ulead Systems, Inc.]
  34.     <NeroFilterCheck><C:\WINDOWS\system32\NeroCheck.exe>  [Ahead Software Gmbh]
  35.     <RemoteControl><"C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe">  [Cyberlink Corp.]
  36.     <ccApp><"C:\Program Files\Common Files\Symantec Shared\ccApp.exe">  [(Verified)Symantec Corporation]
  37.     <vptray><C:\PROGRA~1\SYMANT~1\VPTray.exe>  [(Verified)Symantec Corporation]
  38.     <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot>  [(Verified)"RealNetworks, Inc."]
  39.     <Flashget><"C:\Program Files\FlashGet\FlashGet.exe" /min>  [FlashGet.com]
  40.     <YSearchProtection><"C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe">  [(Verified)Yahoo! Inc.]
  41.     <Super Rabbit SRRestore><C:\Program Files\Super Rabbit\magicset\srrest.exe /autosave>  [Super Rabbit Soft]
  42.     <Super Rabbit IEPro><C:\Program Files\Super Rabbit\magicset\SRIECLI.EXE /LOAD>  [N/A]
  43. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  44.     <shell><Explorer.exe>  [(Verified)Microsoft Windows Component Publisher]
  45.     <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Windows Publisher]
  46. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  47.     <AppInit_DLLs><>  [N/A]
  48. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  49.     <UIHost><logonui.exe>  [(Verified)Microsoft Windows Publisher]
  50. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
  51.     <WPDShServiceObj><C:\WINDOWS\system32\WPDShServiceObj.dll>  [(Verified)Microsoft Windows Component Publisher]
  52. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\NavLogon]
  53.     <WinlogonNotify: NavLogon><C:\WINDOWS\system32\NavLogon.dll>  [(Verified)Symantec Corporation]
  54. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
  55.     <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE>  [N/A]
  56. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
  57.     <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [N/A]
  58. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
  59.     <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [N/A]
  60. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
  61.     <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [N/A]
  62. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
  63.     <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT>  [(Verified)Microsoft Windows Publisher]
  64. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
  65.     <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser>  [(Verified)Microsoft Windows Publisher]
  66. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
  67.     <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub>  [(Verified)Microsoft Windows Component Publisher]
  68. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
  69.     <Address Book 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [N/A]
  70. ==================================
  71. Startup Folders
  72. N/A
  73. ==================================
  74. Services
  75. [Symantec Event Manager / ccEvtMgr][Running/Auto Start]
  76.   <"C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"><Symantec Corporation>
  77. [Symantec Password Validation / ccPwdSvc][Stopped/Manual Start]
  78.   <"C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe"><Symantec Corporation>
  79. [Symantec Settings Manager / ccSetMgr][Running/Auto Start]
  80.   <"C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"><Symantec Corporation>
  81. [Symantec AntiVirus Definition Watcher / DefWatch][Running/Auto Start]
  82.   <"C:\Program Files\Symantec AntiVirus\DefWatch.exe"><Symantec Corporation>
  83. [Google Updater Service / gusvc][Stopped/Manual Start]
  84.   <"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"><Google>
  85. [Human Interface Device Access / HidServ][Stopped/Disabled]
  86.   <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
  87. [InstallDriver Table Manager / IDriverT][Stopped/Manual Start]
  88.   <"C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe"><Macrovision Corporation>
  89. [npkcmsvc / npkcmsvc][Stopped/Auto Start]
  90.   <C:\Program Files\Gamania\TalesWeaver\npkcmsvc.exe><N/A>
  91. [SavRoam / SavRoam][Stopped/Manual Start]
  92.   <"C:\Program Files\Symantec AntiVirus\SavRoam.exe"><symantec>
  93. [Secondary Logon / seclogon][Running/Auto Start]
  94.   <C:\WINDOWS\System32\svchost.exe -k netsvcs-->c:\windows\system32\com\xafrjiktp.dll><N/A>
  95. [Symantec Network Drivers Service / SNDSrvc][Stopped/Manual Start]
  96.   <"C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe"><Symantec Corporation>
  97. [Symantec SPBBCSvc / SPBBCSvc][Stopped/Manual Start]
  98.   <"C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe"><Symantec Corporation>
  99. [Symantec AntiVirus / Symantec AntiVirus][Running/Auto Start]
  100.   <"C:\Program Files\Symantec AntiVirus\Rtvscan.exe"><Symantec Corporation>
  101. ==================================
  102. Drivers
  103. [a347bus / a347bus][Running/Boot Start]
  104.   <\SystemRoot\system32\DRIVERS\a347bus.sys><>
  105. [a347scsi / a347scsi][Running/Boot Start]
  106.   <\SystemRoot\System32\Drivers\a347scsi.sys><>
  107. [aayv43z / aayv43z9][Running/Boot Start]
  108.   <\SystemRoot\System32\DRIVERS\aayv43z9.sys><N/A>
  109. [Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start]
  110.   <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
  111. [Symantec Eraser Control driver / eeCtrl][Running/System Start]
  112.   <\??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys><Symantec Corporation>
  113. [ialm / ialm][Running/Manual Start]
  114.   <System32\DRIVERS\ialmnt5.sys><Intel Corporation>
  115. [NAVENG / NAVENG][Stopped/Manual Start]
  116.   <\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080214.003\naveng.sys><Symantec Corporation>
  117. [NAVEX15 / NAVEX15][Stopped/Manual Start]
  118.   <\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080214.003\navex15.sys><Symantec Corporation>
  119. [nmpkg / nmpkg][Stopped/Auto Start]
  120.   <\??\C:\WINDOWS\system32\drivers\nmpkg.sys><N/A>
  121. [npkcrypt / npkcrypt][Stopped/Auto Start]
  122.   <\??\C:\Program Files\Gamania\TalesWeaver\npkcrypt.sys><N/A>
  123. [直接平行連接埠連結驅動程式 / Ptilink][Running/Manual Start]
  124.   <System32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
  125. [PxHelp20 / PxHelp20][Running/Boot Start]
  126.   <\SystemRoot\System32\Drivers\PxHelp20.sys><Sonic Solutions>
  127. [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start]
  128.   <System32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
  129. [SAVRT / SAVRT][Running/System Start]
  130.   <\??\C:\Program Files\Symantec AntiVirus\savrt.sys><Symantec Corporation>
  131. [SAVRTPEL / SAVRTPEL][Running/System Start]
  132.   <\??\C:\Program Files\Symantec AntiVirus\Savrtpel.sys><Symantec Corporation>
  133. [Secdrv / Secdrv][Stopped/Manual Start]
  134.   <System32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
  135. [SPBBCDrv / SPBBCDrv][Stopped/Manual Start]
  136.   <\??\C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys><Symantec Corporation>
  137. [sptd / sptd][Running/Boot Start]
  138.   <\SystemRoot\System32\Drivers\sptd.sys><N/A>
  139. [STEC3 / STEC3][Running/Auto Start]
  140.   <\??\C:\WINDOWS\system32\STEC3.sys><AntiCracking>
  141. [SymEvent / SymEvent][Running/Manual Start]
  142.   <\??\C:\Program Files\Symantec\SYMEVENT.SYS><Symantec Corporation>
  143. [SYMREDRV / SYMREDRV][Running/Manual Start]
  144.   <\SystemRoot\System32\Drivers\SYMREDRV.SYS><Symantec Corporation>
  145. [SYMTDI / SYMTDI][Running/System Start]
  146.   <\SystemRoot\System32\Drivers\SYMTDI.SYS><Symantec Corporation>
  147. [x0ua / x0ua][Stopped/Auto Start]
  148.   <\??\C:\WINDOWS\system32\drivers\x0ua.sys><N/A>
  149. [Intel(R) Graphics Platform (SoftBIOS) Driver / {6080A529-897E-4629-A488-ABA0C29B635E}][Running/System Start]
  150.   <system32\drivers\ialmsbw.sys><Intel Corporation>
  151. [Intel(R) Graphics Chipset (KCH) Driver / {D31A0762-0CEB-444e-ACFF-B049A1F6FE91}][Running/Manual Start]
  152.   <system32\drivers\ialmkchw.sys><Intel Corporation>
  153. ==================================
  154. Browser Add-ons
  155. [&Yahoo! Toolbar Helper]
  156.   {02478D38-C3F9-4EFB-9B51-7695ECA05670} <C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll, Yahoo! Inc.>
  157. [FGCatchUrl]
  158.   {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} <C:\Program Files\FlashGet\jccatch.dll, www.flashget.com>
  159. [Google Toolbar Helper]
  160.   {AA58ED58-01DD-4d91-8333-CF10577473F7} <c:\program files\google\googletoolbar1.dll, Google Inc.>
  161. [超級兔子上網精靈]
  162.   {FEDF637B-F631-4583-A210-33CC828D42DB} <C:\PROGRA~1\SUPERR~1\magicset\HAOKAN~2.DLL, 超?兔子>
  163. [@shdoclc.dll,-866]
  164.   {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
  165. [Yahoo!奇摩捷徑列]
  166.   {EF99BD32-C1FB-11D2-892F-0090271D4F88} <C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll, Yahoo! Inc.>
  167. [Alcohol Toolbar]
  168.   {ED4BD629-C1B6-4399-8A34-02CCAA921DC9} <C:\Program Files\Alcohol Toolbar\v3.2.0.0\Alcohol_Toolbar.dll, >
  169. [ALiBaBar]
  170.   {0A1375E1-56C2-11D6-8E45-8933A0FB5235} <C:\PROGRA~1\ALiBaBar\ALiBaBar.dll, Alfred, C. S. Li>
  171. [&Google]
  172.   {2318C2B1-4965-11d4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar1.dll, Google Inc.>
  173. [Megaupload Toolbar]
  174.   {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} <C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL, MEGAUPLOAD>
  175. [超級兔子上網精靈]
  176.   {FEDF637B-F631-4583-A210-33CC828D42DB} <C:\PROGRA~1\SUPERR~1\magicset\HAOKAN~2.DLL, 超?兔子>
  177. [Windows Genuine Advantage Validation Tool]
  178.   {17492023-C23A-453E-A040-C7C580BBF700} <C:\WINDOWS\system32\LegitCheckControl.DLL, Microsoft Corporation>
  179. [YInstStarter Class]
  180.   {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} <C:\Program Files\Yahoo!\Common\yinsthelper.dll, Yahoo! Inc.>
  181. [Office Update Installation Engine]
  182.   {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} <C:\WINDOWS\opuc.dll, Microsoft Corporation>
  183. [NowStarter Control]
  184.   {A22B8FD2-4CAA-4EFB-82F7-680CD656D9B0} <C:\WINDOWS\DOWNLO~1\GNOWST~1.OCX, (C) NOWCOM>
  185. [????????????]
  186.   {E0BE586C-7C66-4909-94D6-D18BBBDD6373} <C:\WINDOWS\DOWNLO~1\fbx2.ocx, Gretech Japan>
  187. [Google Script Object]
  188.   {00EF2092-6AC5-47C0-BD25-CF2D5D657FEB} <c:\program files\google\googletoolbar1.dll, Google Inc.>
  189. [&Yahoo! Toolbar Helper]
  190.   {02478D38-C3F9-4EFB-9B51-7695ECA05670} <C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll, Yahoo! Inc.>
  191. [ActiveMovieControl Object]
  192.   {05589FA1-C356-11CE-BF01-00AA0055595A} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
  193. [Web Browser Applet Control]
  194.   {08B0E5C0-4FCB-11CF-AAA5-00401C608501} <C:\WINDOWS\System32\msjava.dll, Microsoft Corporation>
  195. [ALiBaBar]
  196.   {0A1375E1-56C2-11D6-8E45-8933A0FB5235} <C:\PROGRA~1\ALiBaBar\ALiBaBar.dll, Alfred, C. S. Li>
  197. [PeerDraw Class]
  198.   {10072CEC-8CC1-11D1-986E-00A0C955B42E} <C:\Program Files\Common Files\Microsoft Shared\VGX\vgx.dll, Microsoft Corporation>
  199. [Windows Genuine Advantage Validation Tool]
  200.   {17492023-C23A-453E-A040-C7C580BBF700} <C:\WINDOWS\system32\LegitCheckControl.DLL, Microsoft Corporation>
  201. [RealPlayer SMIL Download Handler]
  202.   {224E833B-2CC6-42D9-AE39-90B6A38A4FA2} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
  203. [Windows Media Player]
  204.   {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
  205. [&Google]
  206.   {2318C2B1-4965-11D4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar1.dll, Google Inc.>
  207. [HTML Document]
  208.   {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
  209. [DHTML Edit Control Safe for Scripting for IE5]
  210.   {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\WINDOWS\system32\dllcache\dhtmled.ocx, Microsoft Corporation>
  211. [FGCatchUrl]
  212.   {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} <C:\Program Files\FlashGet\jccatch.dll, www.flashget.com>
  213. [HtmlDlgSafeHelper Class]
  214.   {3050F819-98B5-11CF-BB82-00AA00BDCE0B} <C:\WINDOWS\system32\mshtmled.dll, Microsoft Corporation>
  215. [YInstStarter Class]
  216.   {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} <C:\Program Files\Yahoo!\Common\yinsthelper.dll, Yahoo! Inc.>
  217. [IETag Factory]
  218.   {38481807-CA0E-42D2-BF39-B33AF135CC4D} <C:\PROGRA~1\COMMON~1\MICROS~1\SMARTT~1\IETAG.DLL, Microsoft Corporation>
  219. [BitComet Helper]
  220.   {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} <C:\Program Files\BitComet\tools\BitCometBHO_1.1.4.29.dll, BitComet>
  221. [Office Update Installation Engine]
  222.   {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} <C:\WINDOWS\opuc.dll, Microsoft Corporation>
  223. [XML Document]
  224.   {48123BC4-99D9-11D1-A6B3-00C04FD91555} <%SystemRoot%\System32\msxml3.dll, N/A>
  225. []
  226.   {4D2EAF15-81D0-42DA-8C39-19EDD39E0FB3} <C:\WINDOWS\system32\ptnodqhhcbice.dll, >
  227. [Megaupload Toolbar]
  228.   {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} <C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL, MEGAUPLOAD>
  229. [Shell Name Space]
  230.   {55136805-B2DE-11D1-B9F2-00A0C98BC547} <%SystemRoot%\System32\shdocvw.dll, N/A>
  231. [WUWebControl Class]
  232.   {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation>
  233. [DivXBrowserPlugin Object]
  234.   {67DABFBF-D0AB-41FA-9C46-CC0F21721616} <C:\Program Files\DivX\DivX Web Player\npdivx32.dll, DivX,Inc.>
  235. [Windows Media Player]
  236.   {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
  237. [Active Desktop Mover]
  238.   {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A>
  239. [Alcohol Toolbar Helper]
  240.   {8126A4A5-BFD3-46FE-BBDF-BFB5CF78E489} <C:\Program Files\Alcohol Toolbar\v3.2.0.0\Alcohol_Toolbar.dll, >
  241. [Microsoft Web Browser]
  242.   {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\System32\shdocvw.dll, Microsoft Corporation>
  243. [Windows Live Sign-in Helper]
  244.   {9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, Microsoft Corporation>
  245. [NowStarter Control]
  246.   {A22B8FD2-4CAA-4EFB-82F7-680CD656D9B0} <C:\WINDOWS\DOWNLO~1\GNOWST~1.OCX, (C) NOWCOM>
  247. [RMGetLicense Class]
  248.   {A9FC132B-096D-460B-B7D5-1DB0FAE0C062} <C:\WINDOWS\system32\msnetobj.dll, Microsoft Corporation>
  249. [Google Toolbar Helper]
  250.   {AA58ED58-01DD-4D91-8333-CF10577473F7} <c:\program files\google\googletoolbar1.dll, Google Inc.>
  251. [Microsoft Scriptlet Component]
  252.   {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation>
  253. [Google Toolbar Notifier BHO]
  254.   {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll, Google Inc.>
  255. [SearchAssistantOC]
  256.   {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\System32\shdocvw.dll, N/A>
  257. [RDS.DataSpace]
  258.   {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
  259. [AUDIO__MID Moniker Class]
  260.   {CD3AFA74-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
  261. [AUDIO__MP3 Moniker Class]
  262.   {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
  263. [AUDIO__MPEGURL Moniker Class]
  264.   {CD3AFA78-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
  265. [AUDIO__X_MS_WMA Moniker Class]
  266.   {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
  267. [VIDEO__AVI Moniker Class]
  268.   {CD3AFA88-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
  269. [VIDEO__MPEG Moniker Class]
  270.   {CD3AFA89-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
  271. [VIDEO__X_MS_ASF Moniker Class]
  272.   {CD3AFA8F-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
  273. [VIDEO__X_MS_WM Moniker Class]
  274.   {CD3AFA92-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
  275. [VIDEO__X_MS_WMV Moniker Class]
  276.   {CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
  277. [ALiBaBar_Helper]
  278.   {CE439C63-384A-747A-A357-23D96B5D652B} <C:\PROGRA~1\ALiBaBar\ALiBaBar.dll, Alfred, C. S. Li>
  279. [RealPlayer G2 Control]
  280.   {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
  281. [Windows Live Sign-in Control]
  282.   {D2517915-48CE-4286-970F-921E881B8C5C} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, Microsoft Corporation>
  283. [Shockwave Flash Object]
  284.   {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9e.ocx, Adobe Systems, Inc.>
  285. [GetInfo Class]
  286.   {D5184A39-CBDF-4A4F-AC1A-7A45A852C883} <C:\PROGRA~1\YAHOO!\COMMON\yverinfo.dll, Yahoo! Inc.>
  287. [MessengerChecker Class]
  288.   {DA4F543C-C8A9-4E88-9A79-548CBB46F18F} <C:\Program Files\Yahoo!\Messenger\YPagerChecker.dll, Yahoo! Inc.>
  289. [????????????]
  290.   {E0BE586C-7C66-4909-94D6-D18BBBDD6373} <C:\WINDOWS\DOWNLO~1\fbx2.ocx, Gretech Japan>
  291. [Alcohol Toolbar]
  292.   {ED4BD629-C1B6-4399-8A34-02CCAA921DC9} <C:\Program Files\Alcohol Toolbar\v3.2.0.0\Alcohol_Toolbar.dll, >
  293. [Yahoo!奇摩捷徑列]
  294.   {EF99BD32-C1FB-11D2-892F-0090271D4F88} <C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll, Yahoo! Inc.>
  295. [FlashGet GetFlash Class]
  296.   {F156768E-81EF-470C-9057-481BA8380DBA} <C:\Program Files\FlashGet\getflash.dll, www.flashget.com>
  297. [FGAutoLive]
  298.   {F90D830D-C175-4bbe-82C7-FF94669A4C42} <C:\Program Files\FlashGet\fgupdate.dll, www.flashget.com>
  299. [FGCatchUrl]
  300.   {FB5DA724-162B-11D3-8B9B-AA70B4B0B524} <C:\Program Files\FlashGet\jccatch.dll, www.flashget.com>
  301. [超級兔子上網精靈]
  302.   {FEDF637B-F631-4583-A210-33CC828D42DB} <C:\PROGRA~1\SUPERR~1\magicset\HAOKAN~2.DLL, 超?兔子>
  303. [&使用 FlashGet 下載]
  304.   <C:\Program Files\FlashGet\jc_link.htm, N/A>
  305. [&全部使用 FlashGet 下載]
  306.   <C:\Program Files\FlashGet\jc_all.htm, N/A>
  307. [&･ｳ｡ｨﾏ･ﾎ FlashGet ､Uｸ]
  308.   <, N/A>
  309. [&ｨﾏ･ﾎ FlashGet ､Uｸ]
  310.   <, N/A>
  311. [Foxy 下載]
  312.   <res://C:\Program Files\Foxy\Foxy.exe/download.htm, N/A>
  313. [Foxy 搜尋]
  314.   <res://C:\Program Files\Foxy\Foxy.exe/search.htm, N/A>
  315. [Foxy ､Uｸ]
  316.   <, N/A>
  317. [匯出至 Microsoft Excel(&X)]
  318.   <res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000, N/A>
  319. ==================================
  320. Running Processes
  321. [PID: 384 / SYSTEM][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  322. [PID: 432 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  323. [PID: 456 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  324.     [C:\WINDOWS\system32\NavLogon.dll]  [Symantec Corporation, 10.0.0.359]
  325. [PID: 500 / SYSTEM][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  326. [PID: 512 / SYSTEM][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  327. [PID: 668 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  328. [PID: 744 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  329. [PID: 800 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  330.     [c:\windows\system32\com\xafrjiktp.dll]  [N/A, ]
  331. [PID: 864 / NETWORK SERVICE][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  332. [PID: 916 / LOCAL SERVICE][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  333. [PID: 960 / SYSTEM][C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe]  [Symantec Corporation, 103.5.1.9]
  334.     [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
  335.     [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
  336.     [C:\Program Files\Common Files\Symantec Shared\ccL35.dll]  [Symantec Corporation, 103.5.1.9]
  337.     [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  [Symantec Corporation, 103.5.1.9]
  338.     [C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll]  [Symantec Corporation, 103.5.1.9]
  339. [PID: 996 / SYSTEM][C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe]  [Symantec Corporation, 103.5.1.9]
  340.     [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
  341.     [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
  342.     [C:\Program Files\Common Files\Symantec Shared\ccL35.dll]  [Symantec Corporation, 103.5.1.9]
  343.     [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  [Symantec Corporation, 103.5.1.9]
  344.     [C:\PROGRA~1\COMMON~1\SYMANT~1\SPBBC\BB.DLL]  [Symantec Corporation, 1,5,1,3]
  345.     [C:\PROGRA~1\COMMON~1\SYMANT~1\SPBBC\SPBBCEVT.DLL]  [Symantec Corporation, 1,5,1,3]
  346.     [C:\Program Files\Common Files\Symantec Shared\ccSet.dll]  [Symantec Corporation, 103.5.1.9]
  347.     [C:\PROGRA~1\COMMON~1\SYMANT~1\CCSETEVT.DLL]  [Symantec Corporation, 103.5.1.9]
  348. [PID: 1124 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
  349. [PID: 1384 / user][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234)]
  350.     [C:\Program Files\WinRAR\rarext.dll]  [N/A, ]
  351.     [C:\Program Files\7-Zip\7-zip.dll]  [N/A, ]
  352.     [C:\Program Files\Common Files\Symantec Shared\SSC\vpshell2.dll]  [Symantec Corporation, 10.0.0.359]
  353.     [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
  354. [PID: 1616 / user][C:\WINDOWS\System32\igfxtray.exe]  [Intel Corporation, 3,0,0,1918]
  355.     [C:\WINDOWS\System32\hccutils.DLL]  [Intel Corporation, 3,0,0,1918]
  356.     [C:\WINDOWS\System32\igfxdev.dll]  [Intel Corporation, 3,0,0,1918]
  357.     [C:\WINDOWS\System32\igfxsrvc.dll]  [Intel Corporation, 3,0,0,1918]
  358.     [C:\WINDOWS\System32\igfxres.dll]  [Intel Corporation, 3,0,0,1918]
  359.     [C:\WINDOWS\System32\igfxress.dll]  [Intel Corporation, 3,0,0,1918]
  360. [PID: 1624 / user][C:\WINDOWS\SOUNDMAN.EXE]  [Realtek Semiconductor Corp., 5.0.12]
  361. [PID: 1632 / user][C:\Program Files\Common Files\Ulead Systems\AutoDetector\monitor.exe]  [Ulead Systems, Inc., 2.0.0.0]
  362.     [C:\Program Files\Common Files\Ulead Systems\AutoDetector\u32Comm.dll]  [Ulead Systems, Inc., 10.0.0.0]
  363.     [C:\Program Files\Common Files\Ulead Systems\AutoDetector\DetMethod.dll]  [, 1, 0, 0, 1]
  364.     [C:\Program Files\Common Files\Ulead Systems\AutoDetector\Monitor_Res.dll]  [Ulead Systems, Inc., 2.0.0.0]
  365. [PID: 1676 / user][C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe]  [Cyberlink Corp., 6.00.1027]
  366.     [C:\Program Files\CyberLink\PowerDVD\CLRCEngine2.dll]  [CyberLink Corp., 3.2.2021 ]
  367. [PID: 1696 / user][C:\Program Files\Common Files\Symantec Shared\ccApp.exe]  [Symantec Corporation, 103.5.1.9]
  368.     [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
  369.     [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
  370.     [C:\Program Files\Common Files\Symantec Shared\ccL35.dll]  [Symantec Corporation, 103.5.1.9]
  371.     [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  [Symantec Corporation, 103.5.1.9]
  372.     [C:\PROGRA~1\COMMON~1\SYMANT~1\CCALERT.DLL]  [Symantec Corporation, 103.5.1.9]
  373.     [C:\PROGRA~1\COMMON~1\SYMANT~1\CCEMLPXY.DLL]  [Symantec Corporation, 103.5.1.9]
  374.     [C:\WINDOWS\system32\SYMREDIR.DLL]  [Symantec Corporation, 5.5.1.6]
  375.     [C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll]  [Symantec Corporation, 103.5.1.9]
  376.     [C:\Program Files\Common Files\Symantec Shared\ccProSub.dll]  [Symantec Corporation, 103.5.1.9]
  377.     [C:\Program Files\Symantec AntiVirus\SavEmail.dll]  [Symantec Corporation, 10.0.0.359]
  378. [PID: 1736 / user][C:\PROGRA~1\SYMANT~1\VPTray.exe]  [Symantec Corporation, 10.0.0.359]
  379.     [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
  380.     [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
  381.     [C:\Program Files\Symantec AntiVirus\SAVRT32.DLL]  [Symantec Corporation, 9.5.0.44]
  382.     [C:\Program Files\Symantec AntiVirus\Cliscan.dll]  [Symantec Corporation, 10.0.0.359]
  383.     [C:\PROGRA~1\SYMANT~1\NAVNTUTL.DLL]  [Symantec Corporation, 10.0.0.359]
  384.     [C:\Program Files\Symantec AntiVirus\Cliproxy.dll]  [Symantec Corporation, 10.0.0.359]
  385. [PID: 1744 / user][C:\Program Files\Common Files\Real\Update_OB\realsched.exe]  [RealNetworks, Inc., 0.1.0.3760]
  386. [PID: 1852 / user][C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe]  [Yahoo! Inc., 2007, 6, 8, 1]
  387.     [C:\Program Files\Yahoo!\Search Protection\fdload.dll]  [Yahoo! Inc., 2007, 11, 7, 1]
  388. [PID: 1868 / user][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  389. [PID: 416 / SYSTEM][C:\Program Files\Symantec AntiVirus\DefWatch.exe]  [Symantec Corporation, 10.0.0.359]
  390.     [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
  391. [PID: 820 / SYSTEM][C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe]  [Microsoft Corporation, 7.00.9466]
  392. [PID: 1328 / SYSTEM][C:\Program Files\Symantec AntiVirus\Rtvscan.exe]  [Symantec Corporation, 10.0.0.359]
  393.     [C:\WINDOWS\system32\CBA.DLL]  [IntelR Corporation, 6.12.0.130 E]
  394.     [C:\WINDOWS\system32\MsgSys.dll]  [IntelR Corporation, 6.12.0.130 E]
  395.     [C:\WINDOWS\system32\NTS.dll]  [IntelR Corporation, 6.12.0.130 E]
  396.     [C:\WINDOWS\system32\PDS.DLL]  [IntelR Corporation, 6.12.0.130 E]
  397.     [C:\Program Files\Symantec AntiVirus\NAVLU.dll]  [Symantec Corporation, 10.0.0.359]
  398.     [C:\WINDOWS\system32\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]
  399.     [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
  400.     [C:\Program Files\Symantec AntiVirus\NAVNTUTL.DLL]  [Symantec Corporation, 10.0.0.359]
  401.     [c:\program files\common files\symantec shared\ssc\ScsComms.dll]  [Symantec Corporation, 10.0.0.359]
  402.     [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
  403.     [C:\Program Files\Symantec AntiVirus\I2ldvp3.dll]  [Symantec Corporation, 10.0.0.359]
  404.     [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  [Symantec Corporation, 103.5.1.9]
  405.     [C:\Program Files\Common Files\Symantec Shared\ccL35.dll]  [Symantec Corporation, 103.5.1.9]
  406.     [C:\Program Files\Common Files\Symantec Shared\ccDec.dll]  [Symantec Corporation, 103.5.1.9]
  407.     [C:\Program Files\Common Files\Symantec Shared\Decomposers\decsdk.dll]  [Symantec Corporation, 3.02.12.35]
  408.     [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2.dll]  [Symantec Corporation, 3.02.12.35]
  409.     [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2ID.dll]  [Symantec Corporation, 3.02.12.35]
  410.     [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2Zip.dll]  [Symantec Corporation, 3.02.12.35]
  411.     [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2SS.dll]  [Symantec Corporation, 3.02.12.35]
  412.     [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2GZIP.dll]  [Symantec Corporation, 3.02.12.35]
  413.     [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2CAB.dll]  [Symantec Corporation, 3.02.12.35]
  414.     [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2LHA.dll]  [Symantec Corporation, 3.02.12.35]
  415.     [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2ARJ.dll]  [Symantec Corporation, 3.02.12.35]
  416.     [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2TNEF.dll]  [Symantec Corporation, 3.02.12.35]
  417.     [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2LZ.dll]  [Symantec Corporation, 3.02.12.35]
  418.     [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2AMG.dll]  [Symantec Corporation, 3.02.12.35]
  419.     [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2RAR.dll]  [Symantec Corporation, 3.02.12.35]
  420.     [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2TAR.dll]  [Symantec Corporation, 3.02.12.35]
  421.     [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2RTF.dll]  [Symantec Corporation, 3.02.12.35]
  422.     [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2Text.dll]  [Symantec Corporation, 3.02.12.35]
  423.     [C:\Program Files\Common Files\Symantec Shared\ccScan.dll]  [Symantec Corporation, 103.5.1.9]
  424.     [C:\Program Files\Common Files\Symantec Shared\ecmldr32.DLL]  [Symantec Corporation, 1.4.0.11]
  425.     [C:\Program Files\Symantec AntiVirus\DefUtDCD.dll]  [Symantec Corporation, 3.1.13a.0]
  426.     [C:\Program Files\Symantec AntiVirus\SAVRT32.DLL]  [Symantec Corporation, 9.5.0.44]
  427.     [C:\Program Files\Symantec AntiVirus\IMail.dll]  [Symantec Corporation, 10.0.0.359]
  428.     [C:\Program Files\Symantec AntiVirus\NotesExt.dll]  [Symantec Corporation, 10.0.0.359]
  429.     [C:\Program Files\Symantec AntiVirus\vpmsece3.dll]  [Symantec Corporation, 10.0.0.359]
  430.     [C:\Program Files\Symantec AntiVirus\SymProtectStorage.dll]  [Symantec Corporation, 10.0.0.359]
  431.     [C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCEvt.dll]  [Symantec Corporation, 1,5,1,3]
  432.     [C:\Program Files\Symantec\LiveUpdate\LuComServerPS_2_6.DLL]  [Symantec Corporation, 2.6.18.0]
  433.     [C:\Program Files\Common Files\Symantec Shared\SSC\scandlgs.dll]  [Symantec Corporation, 10.0.0.359]
  434.     [C:\Program Files\Symantec AntiVirus\Cliscan.dll]  [Symantec Corporation, 10.0.0.359]
  435.     [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080214.003\ccEraser.dll]  [Symantec Corporation, 107.4.1.2]
  436.     [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080214.003\ecmsvr32.dll]  [Symantec Corporation, 71.4.0.15]
  437.     [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080214.003\NAVEX32a.DLL]  [Symantec Corporation, 20071.4.1.10]
  438.     [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080214.003\NAVENG32.DLL]  [Symantec Corporation, 20071.4.1.10]
  439.     [C:\Program Files\Symantec AntiVirus\NAVAP32.DLL]  [Symantec Corporation, 9.5.0.44]
  440. [PID: 2320 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  441. [PID: 3484 / user][C:\WINDOWS\system32\wuauclt.exe]  [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)]
  442. [PID: 3440 / user][C:\Program Files\Windows Media Player\wmplayer.exe]  [Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006)]
  443.     [C:\WINDOWS\system32\msdmo.dll]  [, ]
  444.     [C:\WINDOWS\system32\l3codeca.acm]  [Fraunhofer Institut Integrierte Schaltungen IIS, 1, 9, 0, 0305]
  445. [PID: 3868 / user][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
  446.     [c:\program files\google\googletoolbar1.dll]  [Google Inc., 4, 0, 1601, 4978]
  447.     [C:\PROGRA~1\ALiBaBar\ALiBaBar.dll]  [Alfred, C. S. Li, 5.1.0.0]
  448.     [C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll]  [Yahoo! Inc., 2007, 10, 19, 1]
  449.     [C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTabBar.dll]  [Yahoo!, 2007, 8, 21, 1]
  450.     [C:\Program Files\FlashGet\jccatch.dll]  [www.flashget.com, 1, 8, 4, 1007]
  451.     [C:\PROGRA~1\SUPERR~1\magicset\HAOKAN~2.DLL]  [超?兔子, 1.0.7.7]
  452.     [C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTBM.dll]  [Yahoo! Inc., 2007, 10, 17, 1]
  453.     [C:\Program Files\Yahoo!\Companion\Installs\cpn0\pubmod.dll]  [Yahoo! Inc., 2007, 10, 17, 1]
  454.     [C:\Program Files\Yahoo!\Companion\Installs\cpn0\YPUBC.dll]  [Yahoo! Inc., 2006, 12, 4, 1]
  455.     [C:\WINDOWS\System32\MSTCIPHA.IME]  [Microsoft Corporation, 5.1.0.62]
  456.     [C:\Program Files\Common Files\Microsoft Shared\Ink\PENCHT.DLL]  [Microsoft Corporation, 1.0.1038.0]
  457.     [C:\Program Files\Common Files\Microsoft Shared\IME\MSTCIA\Applet\chtskdic.dll]  [Microsoft Corporation, 8.0.0.1912]
  458.     [C:\WINDOWS\system32\Macromed\Flash\Flash9e.ocx]  [Adobe Systems, Inc., 9,0,115,0]
  459. [PID: 3980 / user][C:\Documents and Settings\user\BBS\SREngPS\SREngPS.EXE]  [Smallfrogs Studio, 2.5.16.900]
  460.     [C:\Documents and Settings\user\BBS\SREngPS\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]
  461. ==================================
  462. File Associations
  463. .TXT  Error. [UltraEdit.txt]
  464. .EXE  OK. ["%1" %*]
  465. .COM  OK. ["%1" %*]
  466. .PIF  OK. ["%1" %*]
  467. .REG  OK. [regedit.exe "%1"]
  468. .BAT  OK. ["%1" %*]
  469. .SCR  OK. ["%1" /S]
  470. .CHM  OK. ["C:\WINDOWS\hh.exe" %1]
  471. .HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
  472. .INI  Error. [UltraEdit.ini]
  473. .INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
  474. .VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
  475. .JS   Error. [UltraEdit.js]
  476. .LNK  OK. [{00021401-0000-0000-C000-000000000046}]
  477. ==================================
  478. Winsock Provider
  479. N/A
  480. ==================================
  481. Autorun.Inf
  482. N/A
  483. ==================================
  484. HOSTS File
  485. 127.0.0.1       localhost
  486. ==================================
  487. Process Privileges Scan
  488. Special Privilege Enabled: SeLoadDriverPrivilege [PID = 1632, C:\PROGRAM FILES\COMMON FILES\ULEAD SYSTEMS\AUTODETECTOR\MONITOR.EXE]
  489. Special Privilege Enabled: SeLoadDriverPrivilege [PID = 1676, C:\PROGRAM FILES\CYBERLINK\POWERDVD\PDVDSERV.EXE]
  490. ==================================
  491. API HOOK
  492. N/A
  493. ==================================
  494. Hidden Process
  495. N/A
  496. ==================================
複製代碼
作者: 查爾斯    時間: 08-2-16 12:26
應該是解決了感謝二位



歡迎光臨 鐵之狂傲 (https://gamez.com.tw/)