达人帮我看一下,卡巴主动防御注册表的问题(页 1) - 技术求助热线 - 卡巴斯基技术论坛由江南混混创办|卡巴斯基BBS|卡巴斯基下载|卡巴激活|卡巴斯基8.0|卡巴斯基7.0|卡巴斯基6.0|激活key下载|卡巴下载|杀毒论坛|安全防护

astrnova 发表于 2008-7-16 10:06

达人帮我看一下,卡巴主动防御注册表的问题

2008-7-16 9:59:23 C:\WINDOWS\system32\msiexec.exe HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SnapshotFile\shell\Open\command (Default) "C:\Program Files\Common Files\Microsoft Shared\Snapshot Viewer\SNAPVIEW.EXE" /dde 空结束的Unicode字符串 创建 被阻止　　 
这个是什么意思啊?我禁止了.

数码先行 发表于 2008-7-16 10:41

这个好像是要通过更改注册表来添加一个插件　SNAPVIEW.EXE。你阻止了，没有问题的(f%z4uk;[H/Y)NSg

[[i] 本帖最后由数码先行于 2008-7-16 13:43 编辑 [/i]]

ngc0717 发表于 2008-7-16 12:53

这个是MS 里面的Access 里的报表快照。。楼主使用的应该是ofice2003吧。。
  空结束的Unicode字符串创建被阻止。。楼主用的肯定是卡巴7.0版本。。6]7Z/j'?a4i x
 这个在主动防御里面我以前遇到过，若是楼主的Office2003更新到最新补丁的话，这个不该阻止的，@.jt*GBI
 
要不然会导致数据库无法查看报表，或者Access出现问题。。。!W,t-r/Z;j's }t:hU2l)P
 
 引。。。。。。。。。。。。。。。。'wl7\5b/f8A?
 关于报表快照和 Snapshot Viewer 报表快照报表快照是一个包含了高精度的各 Microsoft Access 报表页的文件（.snp 扩
 k'qM6FC_(n%g
展名），并且其中保存了报表中的二维格式、图形和其他嵌入的对象。 Snapshot Viewer Snapshot Viewer 是一个用于
 *eE:J)iA
观看、打印、和发送快照的程序，例如报表快照程序。

astrnova 发表于 2008-7-16 14:31

楼上说的都对,但是我们局域网里现在木马泛滥，ARP攻击很多，我怀疑是不是木马导致让我安装这个阿，以前都不用安装的。)_+Yz.R5O]&e
trjMFm;R8b
我现在又用回NOD32了，卡巴太占内存了。SC5u}!_)]2u
时间模块对象名称病毒操作用户信息
2008-7-16 14:24:12 网络监控文件 [url]http://ww.xnibi.com/71.swf[/url] SWF/Exploit.CVE-2007-0071 木马

astrnova 发表于 2008-7-16 14:35

[CODE]
2008-07-16,14:30:28
System Repair Engineer 2.6.12.1018 Smallfrogs (<A href="http://www.KZTechs.com">http://www.KZTechs.com</A>)"o#C&v0Ea7B2x
Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能
以下内容被选中：     所有的启动项目（包括注册表、启动文件夹、服务等）     浏览器加载项     正在运行的进程（包括进程模块信息）     文件关联     Winsock 提供者     Autorun.inf     HOSTS 文件     进程特权扫描
 启动项目 注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]     <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Publisher] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]     <load><>  [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]     <Cmaudio><RunDll32 cmicnfg.cpl,CMICtrlWnd>  [N/A]     <nod32kui><"C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE>  [Eset ]     <SKYNET Personal FireWall><C:\PROGRA~1\SkyNet\FireWall\pfw.exe>  [广州众达天网技术有限公司]     <IMSCMig><C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload>  [(Verified)Microsoft Corporation]     <Acrobat Assistant 7.0><"C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe">  [Adobe Systems Inc.]     <MSConfig><C:\WINDOWS\system32\msconfig.exe /auto>  [(Verified)Microsoft Windows Publisher]     <AntiARPStandalone><C:\Program Files\彩影软件\ARP防火墙单机版\AntiARP.exe>  [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]     <tzc02,0,tzchange.exe /F Pacific SA Standard Time /S 10 6 2 23 59 59 999 /E 3 6 2 23 59 59 999 /G><>  [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]     <shell><Explorer.exe>  [(Verified)Microsoft Windows Publisher]     <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]     <AppInit_DLLs><>  [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]     <UIHost><logonui.exe>  [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]     <{AEB6717E-7E19-11d0-97EE-00C04FD91972}><shell32.dll>  [Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]     <PostBootReminder><%SystemRoot%\system32\SHELL32.dll>  [Microsoft Corporation]     <CDBurn><%SystemRoot%\system32\SHELL32.dll>  [Microsoft Corporation]     <WebCheck><%SystemRoot%\system32\webcheck.dll>  [(Verified)Microsoft Windows Publisher]     <SysTray><C:\WINDOWS\system32\stobject.dll>  [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]     <WinlogonNotify: crypt32chain><crypt32.dll>  [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]     <WinlogonNotify: cryptnet><cryptnet.dll>  [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]     <WinlogonNotify: cscdll><cscdll.dll>  [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]     <WinlogonNotify: ScCertProp><wlnotify.dll>  [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]     <WinlogonNotify: Schedule><wlnotify.dll>  [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]     <WinlogonNotify: sclgntfy><sclgntfy.dll>  [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]     <WinlogonNotify: SensLogn><WlNotify.dll>  [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]     <WinlogonNotify: termsrv><wlnotify.dll>  [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]     <WinlogonNotify: wlballoon><wlnotify.dll>  [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]     <{438755C2-A8BA-11D1-B96B-00A0C90312E1}><%SystemRoot%\system32\browseui.dll>  [Microsoft Corporation]     <{8C7461EF-2B13-11d2-BE35-3078302C2030}><%SystemRoot%\system32\browseui.dll>  [Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]     <Microsoft Windows Media Player><C:\WINDOWS\inf\unregmp2.exe /ShowWMP>  [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]     <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE>  [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS]     <浏览器自定义组件><RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP>  [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]     <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]     <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]     <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]     <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT>  [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]     <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp.inf,PerUserStub>  [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]     <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}]     <Windows 桌面更新><regsvr32.exe /s /n /i:U shell32.dll>  [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}]     <Internet Explorer 6><%SystemRoot%\system32\ie4uinit.exe>  [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]     <KernelFaultCheck><; %systemroot%\system32\dumprep 0 -k>  [File is missing]
================================== 启动文件夹 N/A!t9T!w/pP!F
================================== 服务 [DCOM Server Process Launcher / DcomLaunch][Running/Auto Start]   <C:\WINDOWS\system32\svchost -k DcomLaunch-->%SystemRoot%\system32\rpcss.dll><Microsoft Corporation> [DHCP Client / Dhcp][Running/Auto Start]   <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\dhcpcsvc.dll><Microsoft Corporation> [COM+ Event System / EventSystem][Running/Manual Start]   <C:\WINDOWS\system32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\es.dll><Microsoft Corporation> [Fast User Switching Compatibility / FastUserSwitchingCompatibility][Stopped/Manual Start]   <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\shsvcs.dll><Microsoft Corporation> [Human Interface Device Access / HidServ][Stopped/Disabled]   <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A> [HuntmineSvr / HuntmineSvr][Running/Disabled]   <D:\Program Files\Huntmine\HuntmineSvr.exe><N/A> [Server / lanmanserver][Running/Auto Start]   <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\srvsvc.dll><Microsoft Corporation> [Workstation / lanmanworkstation][Running/Auto Start]   <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\wkssvc.dll><Microsoft Corporation> [Network Connections / Netman][Running/Manual Start]   <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\netman.dll><Microsoft Corporation> [NOD32 Kernel Service / NOD32krn][Running/Auto Start]   <"C:\Program Files\Eset\nod32krn.exe"><Eset> [Remote Access Connection Manager / RasMan][Stopped/Manual Start]   <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\rasmans.dll><Microsoft Corporation> [Remote Procedure Call (RPC) / RpcSs][Running/Auto Start]   <C:\WINDOWS\system32\svchost -k rpcss-->%SystemRoot%\system32\rpcss.dll><Microsoft Corporation> [Shell Hardware Detection / ShellHWDetection][Running/Auto Start]   <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\shsvcs.dll><Microsoft Corporation> [Print Spooler / Spooler][Running/Auto Start]   <C:\WINDOWS\system32\spoolsv.exe><Microsoft Corporation> [Windows Image Acquisition (WIA) / stisvc][Running/Manual Start]   <C:\WINDOWS\system32\svchost.exe -k imgsvc-->%SystemRoot%\system32\wiaservc.dll><Microsoft Corporation> [Telephony / TapiSrv][Stopped/Manual Start]   <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\tapisrv.dll><Microsoft Corporation> [Themes / Themes][Running/Auto Start]   <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\shsvcs.dll><Microsoft Corporation> [WebClient / WebClient][Running/Auto Start]   <C:\WINDOWS\system32\svchost.exe -k LocalService-->%SystemRoot%\System32\webclnt.dll><Microsoft Corporation> [ARP防火墙加载程序 / AntiARPClientLoader][Stopped/Auto Start]   <"C:\Program Files\彩影软件\ARP防火墙单机版\AntiARPClientLoader.exe"><N/A>
================================== 驱动程序 [Microsoft Kernel Acoustic Echo Canceller / aec][Stopped/Manual Start]   <system32\drivers\aec.sys><Microsoft Corporation> [AMON / AMON][Running/Auto Start]   <\SystemRoot\system32\drivers\amon.sys><Eset> [C-Media WDM Audio Interface / cmuda][Running/Manual Start]   <system32\drivers\cmuda.sys><C-Media Inc> [FltMgr / FltMgr][Running/Boot Start]   <\SystemRoot\system32\DRIVERS\fltMgr.sys><Microsoft Corporation> [HTTP / HTTP][Running/Manual Start]   <System32\Drivers\HTTP.sys><Microsoft Corporation> [IP Network Address Translator / IpNat][Running/Manual Start]   <system32\DRIVERS\ipnat.sys><Microsoft Corporation> [Microsoft Kernel Wave Audio Mixer / kmixer][Running/Manual Start]   <system32\drivers\kmixer.sys><Microsoft Corporation> [MRxSmb / MRxSmb][Running/System Start]   <system32\DRIVERS\mrxsmb.sys><Microsoft Corporation> [nod32drv / nod32drv][Running/System Start]   <\SystemRoot\system32\drivers\nod32drv.sys><N/A> [nv / nv][Running/Manual Start]   <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation> [NVIDIA nForce MCP Networking Controller Driver / NVENET][Running/Manual Start]   <system32\DRIVERS\NVENET.sys><NVIDIA Corporation> [nvidesm / nvidesm][Running/Boot Start]   <\SystemRoot\system32\drivers\nvidesm.sys><NVIDIA Corporation> [NVIDIA nForce AGP Bus Filter / nv_agp][Running/Boot Start]   <\SystemRoot\system32\DRIVERS\nv_agp.sys><NVIDIA Corporation> [Direct Parallel Link Driver / Ptilink][Running/Manual Start]   <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.> [Rdbss / Rdbss][Running/System Start]   <system32\DRIVERS\rdbss.sys><Microsoft Corporation> [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start]   <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation> [Secdrv / Secdrv][Stopped/Manual Start]   <system32\DRIVERS\secdrv.sys><N/A> [SKNFW / SKNFW][Running/System Start]   <\??\C:\WINDOWS\system32\Drivers\SKNFW.sys><N/A> [SkyProcs / SkyProcs][Running/Manual Start]   <\??\C:\PROGRA~1\SkyNet\FireWall\SkyProcs.sys><N/A> [Microsoft Kernel Audio Splitter / splitter][Stopped/Manual Start]   <system32\drivers\splitter.sys><Microsoft Corporation> [sptd / sptd][Running/Boot Start]   <\SystemRoot\System32\Drivers\sptd.sys><N/A> [Srv / Srv][Running/Manual Start]   <system32\DRIVERS\srv.sys><Microsoft Corporation> [TCP/IP Protocol Driver / Tcpip][Running/System Start]   <system32\DRIVERS\tcpip.sys><Microsoft Corporation> [Microcode Update Driver / Update][Running/Manual Start]   <system32\DRIVERS\update.sys><Microsoft Corporation> [Microsoft WINMM WDM Audio Compatibility Driver / wdmaud][Running/Manual Start]   <system32\drivers\wdmaud.sys><Microsoft Corporation> [xAntiArpSpoof Service / xAntiArp][Running/Manual Start]   <system32\DRIVERS\xAntiArp.sys><Windows (R) 2000 DDK provider> [AntiARP NDIS Protocol Driver / AntiArpNdisProt][Running/Auto Start]   <system32\DRIVERS\AntiArpNdisProt.sys><Windows (R) 2000 DDK provider> [WinPcap Packet Driver (NPF) / NPF][Running/Manual Start]   <system32\drivers\NPF.sys><CACE Technologies>%Qkf`3z)g^Zo
================================== 浏览器加载项 [AcroIEHlprObj Class]   {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, (Signed) Adobe Systems Incorporated> [AcroIEToolbarHelper Class]   {AE7CD045-E861-484f-8273-0445EE161910} <C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll, Adobe Systems Incorporated> [信息检索(&R)]   {92780B25-18CC-41C8-B9BE-3C9C571A8263} <C:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL, (Signed) Microsoft Corporation> [Adobe PDF]   {47833539-D0C5-4125-9FA8-0819E2EAAC93} <C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll, Adobe Systems Incorporated> [AcroIEHlprObj Class]   {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, (Signed) Adobe Systems Incorporated> [Adobe PDF]   {47833539-D0C5-4125-9FA8-0819E2EAAC93} <C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll, Adobe Systems Incorporated> []   {92780B25-18CC-41C8-B9BE-3C9C571A8263} <, > [AcroIEToolbarHelper Class]   {AE7CD045-E861-484F-8273-0445EE161910} <C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll, Adobe Systems Incorporated> [SearchAssistantOC]   {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A> [Shockwave Flash Object]   {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx, (Signed) Adobe Systems, Inc.> [导出到 Microsoft Office Excel(&X)]   <res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000, N/A> [转换为 Adobe PDF]   <res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html, N/A> [转换为现有 PDF]   <res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html, N/A> [转换选定的链接为 Adobe PDF]   <res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html, N/A> [转换选定的链接为现有 PDF]   <res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html, N/A> [转换选项为 Adobe PDF]   <res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html, N/A> [转换选项为现有 PDF]   <res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html, N/A> [转换链接目标为 Adobe PDF]   <res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html, N/A> [转换链接目标为现有 PDF]   <res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html, N/A>

astrnova 发表于 2008-7-16 14:36

================================== 正在运行的进程 [PID: 448 / SYSTEM][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 752 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\winsrv.dll]  [Microsoft Corporation, 5.1.2600.2751 (xpsp_sp2_gdr.050831-1520)]     [C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427)]     [C:\WINDOWS\system32\KERNEL32.dll]  [Microsoft Corporation, 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)]     [C:\WINDOWS\system32\USER32.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\sxs.dll]  [Microsoft Corporation, 5.1.2600.3019 (xpsp_sp2_gdr.061019-0414)] [PID: 776 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)]     [C:\WINDOWS\system32\AUTHZ.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\USER32.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427)]     [C:\WINDOWS\system32\NETAPI32.dll]  [Microsoft Corporation, 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106)]     [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316)]     [C:\WINDOWS\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\COMCTL32.dll]  [Microsoft Corporation, 5.82 (xpsp.060825-0040)]     [C:\WINDOWS\system32\SHSVCS.dll]  [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316)]     [C:\WINDOWS\system32\sfc_os.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\ole32.dll]  [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)]     [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\iphlpapi.dll]  [Microsoft Corporation, 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003)]     [C:\WINDOWS\system32\xpsp2res.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\CLBCATQ.DLL]  [Microsoft Corporation, 2001.12.4414.308] [PID: 824 / SYSTEM][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)]     [C:\WINDOWS\system32\USER32.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427)]     [C:\WINDOWS\system32\AUTHZ.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\umpnpmgr.dll]  [Microsoft Corporation, 5.1.2600.2744 (xpsp_sp2_gdr.050822-1647)]     [C:\WINDOWS\system32\NETAPI32.dll]  [Microsoft Corporation, 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106)]     [C:\WINDOWS\system32\ole32.dll]  [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)]     [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316)]     [C:\WINDOWS\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\comctl32.dll]  [Microsoft Corporation, 5.82 (xpsp.060825-0040)]     [C:\WINDOWS\system32\xpsp2res.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 844 / SYSTEM][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)]     [C:\WINDOWS\system32\LSASRV.dll]  [Microsoft Corporation, 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106)]     [C:\WINDOWS\system32\USER32.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427)]     [C:\WINDOWS\system32\NETAPI32.dll]  [Microsoft Corporation, 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106)]     [C:\WINDOWS\system32\DNSAPI.dll]  [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)]     [C:\WINDOWS\system32\ole32.dll]  [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)]     [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316)]     [C:\WINDOWS\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\comctl32.dll]  [Microsoft Corporation, 5.82 (xpsp.060825-0040)]     [C:\WINDOWS\system32\kerberos.dll]  [Microsoft Corporation, 5.1.2600.2698 (xpsp_sp2_gdr.050614-1522)]     [C:\WINDOWS\system32\iphlpapi.dll]  [Microsoft Corporation, 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003)]     [C:\WINDOWS\system32\wdigest.dll]  [Microsoft Corporation, 5.1.2600.2874 (xpsp_sp2_gdr.060323-1516)]     [C:\WINDOWS\system32\AUTHZ.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\imon.dll]  [Eset , 2, 70, 32 ]     [C:\Program Files\Eset\pr_imon.dll]  [N/A, ] [PID: 988 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)]     [C:\WINDOWS\system32\USER32.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427)]     [C:\WINDOWS\system32\ole32.dll]  [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)]     [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316)]     [C:\WINDOWS\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\comctl32.dll]  [Microsoft Corporation, 5.82 (xpsp.060825-0040)]     [c:\windows\system32\rpcss.dll]  [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)]     [C:\WINDOWS\system32\xpsp2res.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [c:\windows\system32\AUTHZ.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\NETAPI32.dll]  [Microsoft Corporation, 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106)]     [C:\WINDOWS\system32\CLBCATQ.DLL]  [Microsoft Corporation, 2001.12.4414.308] [PID: 1036 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)]     [C:\WINDOWS\system32\USER32.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427)]     [C:\WINDOWS\system32\ole32.dll]  [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)]     [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316)]     [C:\WINDOWS\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\comctl32.dll]  [Microsoft Corporation, 5.82 (xpsp.060825-0040)]     [c:\windows\system32\rpcss.dll]  [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)]     [C:\WINDOWS\system32\xpsp2res.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\imon.dll]  [Eset , 2, 70, 32 ]     [C:\Program Files\Eset\pr_imon.dll]  [N/A, ]     [C:\WINDOWS\system32\DNSAPI.dll]  [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)]     [C:\WINDOWS\system32\iphlpapi.dll]  [Microsoft Corporation, 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003)]     [C:\WINDOWS\system32\rasadhlp.dll]  [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)]     [C:\WINDOWS\system32\CLBCATQ.DLL]  [Microsoft Corporation, 2001.12.4414.308] [PID: 1108 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)]     [C:\WINDOWS\system32\USER32.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427)]     [C:\WINDOWS\system32\ole32.dll]  [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)]     [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316)]     [C:\WINDOWS\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\System32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\comctl32.dll]  [Microsoft Corporation, 5.82 (xpsp.060825-0040)]     [C:\WINDOWS\System32\xpsp2res.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [c:\windows\system32\shsvcs.dll]  [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316)]     [C:\WINDOWS\system32\NETAPI32.dll]  [Microsoft Corporation, 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106)]     [c:\windows\system32\dhcpcsvc.dll]  [Microsoft Corporation, 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003)]     [c:\windows\system32\DNSAPI.dll]  [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)]     [c:\windows\system32\iphlpapi.dll]  [Microsoft Corporation, 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003)]     [c:\windows\system32\ESENT.dll]  [Microsoft Corporation, 5.1.2468.0 (Lab03_N(jliem).010306-1456)]     [C:\WINDOWS\System32\CLBCATQ.DLL]  [Microsoft Corporation, 2001.12.4414.308]     [C:\WINDOWS\system32\WININET.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [c:\windows\system32\wkssvc.dll]  [Microsoft Corporation, 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106)]     [c:\windows\system32\es.dll]  [Microsoft Corporation, 2001.12.4414.308]     [c:\windows\system32\srvsvc.dll]  [Microsoft Corporation, 5.1.2600.2577 (xpsp_sp2_gdr.041130-1729)]     [c:\windows\system32\netman.dll]  [Microsoft Corporation, 5.1.2600.2743 (xpsp_sp2_gdr.050819-1525)]     [C:\WINDOWS\System32\sfc_os.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\imon.dll]  [Eset , 2, 70, 32 ]     [C:\Program Files\Eset\pr_imon.dll]  [N/A, ]     [c:\windows\system32\AUTHZ.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\System32\SXS.DLL]  [Microsoft Corporation, 5.1.2600.3019 (xpsp_sp2_gdr.061019-0414)]     [C:\WINDOWS\system32\comsvcs.dll]  [Microsoft Corporation, 2001.12.4414.308]     [C:\WINDOWS\system32\colbact.DLL]  [Microsoft Corporation, 2001.12.4414.308]     [C:\WINDOWS\system32\MTXCLU.DLL]  [Microsoft Corporation, 2001.12.4414.311]     [C:\WINDOWS\System32\rasadhlp.dll]  [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)]     [C:\WINDOWS\System32\catsrvut.dll]  [Microsoft Corporation, 2001.12.4414.308]     [C:\WINDOWS\System32\catsrv.dll]  [Microsoft Corporation, 2001.12.4414.308]     [C:\WINDOWS\system32\urlmon.dll]  [Microsoft Corporation, 6.00.2900.3072 (xpsp_sp2_gdr.070124-2319)] [PID: 1164 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)]     [C:\WINDOWS\system32\USER32.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427)]     [C:\WINDOWS\system32\ole32.dll]  [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)]     [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316)]     [C:\WINDOWS\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\comctl32.dll]  [Microsoft Corporation, 5.82 (xpsp.060825-0040)]     [c:\windows\system32\DNSAPI.dll]  [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)]     [c:\windows\system32\iphlpapi.dll]  [Microsoft Corporation, 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003)]     [C:\WINDOWS\system32\imon.dll]  [Eset , 2, 70, 32 ]     [C:\Program Files\Eset\pr_imon.dll]  [N/A, ] [PID: 1288 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)]     [C:\WINDOWS\system32\USER32.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427)]     [C:\WINDOWS\system32\ole32.dll]  [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)]     [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316)]     [C:\WINDOWS\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\comctl32.dll]  [Microsoft Corporation, 5.82 (xpsp.060825-0040)]     [C:\WINDOWS\system32\xpsp2res.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [c:\windows\system32\iphlpapi.dll]  [Microsoft Corporation, 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003)]     [c:\windows\system32\webclnt.dll]  [Microsoft Corporation, 5.1.2600.2821 (xpsp_sp2_gdr.060103-1536)]     [C:\WINDOWS\system32\WININET.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\CLBCATQ.DLL]  [Microsoft Corporation, 2001.12.4414.308]     [C:\WINDOWS\system32\imon.dll]  [Eset , 2, 70, 32 ]     [C:\Program Files\Eset\pr_imon.dll]  [N/A, ] [PID: 1440 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]     [C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)]     [C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427)]     [C:\WINDOWS\system32\USER32.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\ole32.dll]  [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)]     [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316)]     [C:\WINDOWS\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\comctl32.dll]  [Microsoft Corporation, 5.82 (xpsp.060825-0040)]     [C:\WINDOWS\system32\DNSAPI.dll]  [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)]     [C:\WINDOWS\system32\iphlpapi.dll]  [Microsoft Corporation, 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003)]     [C:\WINDOWS\system32\rasadhlp.dll]  [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)]     [C:\WINDOWS\system32\sfc_os.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\netapi32.dll]  [Microsoft Corporation, 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106)]     [C:\WINDOWS\system32\AdobePDF.dll]  [Adobe Systems Incorporated., 7.0.0.00]     [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]     [C:\Program Files\Adobe\Acrobat 7.0\Distillr\AdistRes.CHS]  [, ]     [C:\WINDOWS\system32\CLBCATQ.DLL]  [Microsoft Corporation, 2001.12.4414.308]     [C:\WINDOWS\system32\xpsp2res.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1568 / SYSTEM][D:\Program Files\Huntmine\HuntmineSvr.exe]  [N/A, ]     [C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)]     [D:\Program Files\Huntmine\SSNBase.dll]  [TODO: <Company name>, 1.0.0.1]     [D:\Program Files\Huntmine\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]     [D:\Program Files\Huntmine\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]     [C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427)]     [C:\WINDOWS\system32\USER32.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\ole32.dll]  [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)]     [D:\Program Files\Huntmine\LIBEAY32.dll]  [N/A, ]     [D:\Program Files\Huntmine\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]     [D:\Program Files\Huntmine\LocalInfo.dll]  [TODO: <Company name>, 1.0.0.1]     [D:\Program Files\Huntmine\med.dll]  [, 1, 0, 0, 1]     [C:\WINDOWS\system32\COMCTL32.dll]  [Microsoft Corporation, 5.82 (xpsp.060825-0040)]     [D:\Program Files\Huntmine\VirtualSock.dll]  [TODO: <Company name>, 1.0.0.1]     [C:\WINDOWS\system32\iphlpapi.dll]  [Microsoft Corporation, 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003)]     [D:\Program Files\Huntmine\FileTransfer.dll]  [TODO: <Company name>, 1.0.0.1]     [D:\Program Files\Huntmine\SSNCommand.dll]  [TODO: <Company name>, 1.0.0.1]     [D:\Program Files\Huntmine\SSNAccept.dll]  [TODO: <Company name>, 1.0.0.1]     [D:\Program Files\Huntmine\SSNCmdExecute.dll]  [TODO: <Company name>, 1.0.0.1]     [C:\WINDOWS\system32\WININET.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316)]     [C:\WINDOWS\system32\MFC71CHS.DLL]  [Microsoft Corporation, 7.10.3077.0]     [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\netapi32.dll]  [Microsoft Corporation, 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106)]     [C:\WINDOWS\system32\CLBCATQ.DLL]  [Microsoft Corporation, 2001.12.4414.308]     [C:\WINDOWS\system32\urlmon.dll]  [Microsoft Corporation, 6.00.2900.3072 (xpsp_sp2_gdr.070124-2319)]     [C:\WINDOWS\system32\xpsp2res.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\imon.dll]  [Eset , 2, 70, 32 ]     [C:\Program Files\Eset\pr_imon.dll]  [N/A, ]     [C:\Program Files\Common Files\System\ado\msado15.dll]  [Microsoft Corporation, 2.81.1128.0 (xpsp_sp2_gdr.061226-0034)]     [C:\WINDOWS\system32\comsvcs.dll]  [Microsoft Corporation, 2001.12.4414.308]     [C:\WINDOWS\system32\colbact.DLL]  [Microsoft Corporation, 2001.12.4414.308]     [C:\WINDOWS\system32\MTXCLU.DLL]  [Microsoft Corporation, 2001.12.4414.311]     [C:\WINDOWS\system32\DNSAPI.dll]  [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)]     [C:\WINDOWS\system32\rasadhlp.dll]  [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)] [PID: 1600 / SYSTEM][C:\Program Files\Eset\nod32krn.exe]  [Eset , 2, 70, 32 ]     [C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)]     [C:\WINDOWS\system32\NETAPI32.dll]  [Microsoft Corporation, 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106)]     [C:\WINDOWS\system32\USER32.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427)]     [C:\WINDOWS\system32\ole32.dll]  [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)]     [C:\Program Files\Eset\nod32krr.dll]  [Eset , 2, 70, 16 ]     [C:\Program Files\Eset\ps_amon.dll]  [Eset , 2, 70, 32 ]     [C:\Program Files\Eset\pr_amon.dll]  [Eset , 2, 70, 16 ]     [C:\Program Files\Eset\ps_dmon.dll]  [Eset , 2, 70, 32 ]     [C:\Program Files\Eset\pr_dmon.dll]  [N/A, ]     [C:\Program Files\Eset\ps_emon.dll]  [Eset , 2, 70, 32 ]     [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316)]     [C:\WINDOWS\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\comctl32.dll]  [Microsoft Corporation, 5.82 (xpsp.060825-0040)]     [C:\Program Files\Eset\pr_emon.dll]  [N/A, ]     [C:\WINDOWS\system32\imon.dll]  [Eset , 2, 70, 32 ]     [C:\Program Files\Eset\pr_imon.dll]  [N/A, ]     [C:\Program Files\Eset\ps_nod32.dll]  [Eset , 2, 70, 32 ]     [C:\Program Files\Eset\pr_nod32.dll]  [Eset , 2, 70, 16 ]     [C:\Program Files\Eset\ps_upd.dll]  [Eset , 2, 70, 32 ]     [C:\Program Files\Eset\pr_upd.dll]  [N/A, ]     [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\CLBCATQ.DLL]  [Microsoft Corporation, 2001.12.4414.308]     [C:\WINDOWS\system32\xpsp2res.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\DNSAPI.dll]  [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)]     [C:\WINDOWS\system32\iphlpapi.dll]  [Microsoft Corporation, 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003)]     [C:\WINDOWS\system32\rasadhlp.dll]  [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)] [PID: 404 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)]     [C:\WINDOWS\system32\USER32.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427)]     [C:\WINDOWS\system32\ole32.dll]  [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)]     [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316)]     [C:\WINDOWS\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\System32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\comctl32.dll]  [Microsoft Corporation, 5.82 (xpsp.060825-0040)]     [C:\WINDOWS\System32\CLBCATQ.DLL]  [Microsoft Corporation, 2001.12.4414.308]     [C:\WINDOWS\System32\xpsp2res.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\imon.dll]  [Eset , 2, 70, 32 ]     [C:\Program Files\Eset\pr_imon.dll]  [N/A, ] [PID: 1648 / Astrnova][C:\WINDOWS\system32\wscntfy.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)]     [C:\WINDOWS\system32\USER32.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427)]     [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316)]     [C:\WINDOWS\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\xpsp2res.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\ole32.dll]  [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)] [PID: 280 / Astrnova][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)]     [C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427)]     [C:\WINDOWS\system32\USER32.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316)]     [C:\WINDOWS\system32\ole32.dll]  [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)]     [C:\WINDOWS\system32\BROWSEUI.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\SHDOCVW.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\NETAPI32.dll]  [Microsoft Corporation, 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106)]     [C:\WINDOWS\system32\WININET.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\comctl32.dll]  [Microsoft Corporation, 5.82 (xpsp.060825-0040)]     [C:\WINDOWS\system32\CLBCATQ.DLL]  [Microsoft Corporation, 2001.12.4414.308]     [C:\WINDOWS\system32\xpsp2res.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\LINKINFO.dll]  [Microsoft Corporation, 5.1.2600.2751 (xpsp_sp2_gdr.050831-1520)]     [C:\WINDOWS\system32\urlmon.dll]  [Microsoft Corporation, 6.00.2900.3072 (xpsp_sp2_gdr.070124-2319)]     [C:\WINDOWS\system32\iphlpapi.dll]  [Microsoft Corporation, 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003)]     [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll]  [Adobe Systems Incorporated, 7.0.0.2004121400]     [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]     [C:\WINDOWS\system32\SXS.DLL]  [Microsoft Corporation, 5.1.2600.3019 (xpsp_sp2_gdr.061019-0414)]     [C:\WINDOWS\system32\MLANG.dll]  [Microsoft Corporation, 6.00.2900.2530 (xpsp.040919-1030)]     [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll]  [Adobe Systems, Inc., 7.0.0.0]     [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.CHS]  [Adobe Systems, Inc., 7.0.0.0]     [C:\Program Files\Adobe\Acrobat 7.0\Acrobat Elements\ContextMenu.chs]  [Adobe Systems Inc., 7.0.0.2004121400\0]     [C:\WINDOWS\system32\shdoclc.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\Program Files\WinRAR\rarext.dll]  [N/A, ]     [C:\Program Files\Eset\nodshex.dll]  [N/A, ]     [C:\Program Files\Adobe\Acrobat 7.0\Acrobat Elements\ContextMenu.dll]  [Adobe Systems Inc., 7.0.0.2004121400\0]     [C:\WINDOWS\system32\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]     [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]     [C:\WINDOWS\system32\MFC71CHS.DLL]  [Microsoft Corporation, 7.10.3077.0] [PID: 520 / Astrnova][C:\WINDOWS\system32\RunDll32.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)]     [C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427)]     [C:\WINDOWS\system32\USER32.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\ole32.dll]  [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)]     [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316)]     [C:\WINDOWS\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\comctl32.dll]  [Microsoft Corporation, 5.82 (xpsp.060825-0040)]     [C:\WINDOWS\system\cmicnfg.cpl]  [C-Media Corporation, 1, 0, 0, 30]     [C:\WINDOWS\system32\CLBCATQ.DLL]  [Microsoft Corporation, 2001.12.4414.308] [PID: 528 / Astrnova][C:\Program Files\Eset\nod32kui.exe]  [Eset , 2, 70, 32 ]     [C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)]     [C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427)]     [C:\WINDOWS\system32\USER32.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316)]     [C:\Program Files\Eset\nod32rui.dll]  [N/A, ]     [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\ole32.dll]  [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)]     [C:\Program Files\Eset\pu_amon.dll]  [Eset , 2, 70, 32 ]     [C:\Program Files\Eset\pr_amon.dll]  [Eset , 2, 70, 16 ]     [C:\Program Files\Eset\pu_dmon.dll]  [Eset , 2, 70, 32 ]     [C:\Program Files\Eset\pr_dmon.dll]  [N/A, ]     [C:\Program Files\Eset\pu_emon.dll]  [Eset , 2, 70, 32 ]     [C:\Program Files\Eset\pr_emon.dll]  [N/A, ]     [C:\Program Files\Eset\pu_imon.dll]  [Eset , 2, 70, 32 ]     [C:\Program Files\Eset\pr_imon.dll]  [N/A, ]     [C:\Program Files\Eset\pu_nod32.dll]  [Eset , 2, 70, 32 ]     [C:\Program Files\Eset\pr_nod32.dll]  [Eset , 2, 70, 16 ]     [C:\Program Files\Eset\pu_upd.dll]  [Eset , 2, 70, 32 ]     [C:\Program Files\Eset\pr_upd.dll]  [N/A, ]     [C:\WINDOWS\system32\CLBCATQ.DLL]  [Microsoft Corporation, 2001.12.4414.308]     [C:\WINDOWS\system32\NETAPI32.dll]  [Microsoft Corporation, 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106)]     [C:\WINDOWS\system32\xpsp2res.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.CHS]  [Adobe Systems, Inc., 7.0.0.0]     [C:\WINDOWS\system32\LINKINFO.dll]  [Microsoft Corporation, 5.1.2600.2751 (xpsp_sp2_gdr.050831-1520)] [PID: 1420 / Astrnova][C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe]  [Adobe Systems Inc., 6.0.1.2004121400]     [C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)]     [C:\WINDOWS\system32\USER32.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427)]     [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316)]     [C:\WINDOWS\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\COMCTL32.dll]  [Microsoft Corporation, 5.82 (xpsp.060825-0040)]     [C:\WINDOWS\system32\ole32.dll]  [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)]     [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.chs]  [Adobe Systems Inc., 6.0.0.0] [PID: 560 / Astrnova][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)]     [C:\WINDOWS\system32\USER32.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427)]     [C:\WINDOWS\system32\ole32.dll]  [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)]     [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316)]     [C:\WINDOWS\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 2796 / SYSTEM][C:\WINDOWS\system32\msiexec.exe]  [Microsoft Corporation, 3.1.4000.1823]     [C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)]     [C:\WINDOWS\system32\USER32.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427)]     [C:\WINDOWS\system32\ole32.dll]  [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)]     [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316)]     [C:\WINDOWS\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\xpsp2res.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\CLBCATQ.DLL]  [Microsoft Corporation, 2001.12.4414.308]     [C:\WINDOWS\system32\netapi32.dll]  [Microsoft Corporation, 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106)]     [C:\WINDOWS\system32\sfc_os.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\LINKINFO.dll]  [Microsoft Corporation, 5.1.2600.2751 (xpsp_sp2_gdr.050831-1520)] [PID: 3280 / Astrnova][C:\WINDOWS\system32\conime.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)]     [C:\WINDOWS\system32\USER32.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427)]     [C:\WINDOWS\system32\ole32.dll]  [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)]     [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316)]     [C:\WINDOWS\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\comctl32.dll]  [Microsoft Corporation, 5.82 (xpsp.060825-0040)] [PID: 2500 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)]     [C:\WINDOWS\system32\USER32.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427)]     [C:\WINDOWS\system32\ole32.dll]  [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)]     [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316)]     [C:\WINDOWS\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\comctl32.dll]  [Microsoft Corporation, 5.82 (xpsp.060825-0040)]     [c:\windows\system32\wiaservc.dll]  [Microsoft Corporation, 5.1.2600.3051 (xpsp_sp2_gdr.061219-0316)]     [c:\windows\system32\mscms.dll]  [Microsoft Corporation, 5.1.2600.2709 (xpsp_sp2_gdr.050628-1518)]     [C:\WINDOWS\system32\NETAPI32.dll]  [Microsoft Corporation, 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106)]     [C:\WINDOWS\system32\xpsp2res.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\CLBCATQ.DLL]  [Microsoft Corporation, 2001.12.4414.308] [PID: 1180 / Astrnova][C:\Program Files\DZH5\internet\hypwise.exe]  [N/A, ]     [C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)]     [C:\WINDOWS\system32\netapi32.dll]  [Microsoft Corporation, 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106)]     [C:\WINDOWS\system32\comctl32.dll]  [Microsoft Corporation, 5.82 (xpsp.060825-0040)]     [C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427)]     [C:\WINDOWS\system32\USER32.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\shell32.dll]  [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316)]     [C:\WINDOWS\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\ole32.dll]  [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)]     [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\Program Files\DZH5\internet\olepro32.dll]  [Microsoft Corporation, 5.0.4275]     [C:\WINDOWS\system32\CLBCATQ.DLL]  [Microsoft Corporation, 2001.12.4414.308]     [C:\WINDOWS\system32\shdocvw.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\WININET.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\imon.dll]  [Eset , 2, 70, 32 ]     [C:\Program Files\Eset\pr_imon.dll]  [N/A, ]     [C:\WINDOWS\system32\DNSAPI.dll]  [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)]     [C:\WINDOWS\system32\rasadhlp.dll]  [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)] [PID: 4084 / Astrnova][C:\Program Files\DZH5\internet\hypmain.exe]  [GreatWise, 5.4.5.3002]     [C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)]     [C:\WINDOWS\system32\user32.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427)]     [C:\WINDOWS\system32\ole32.dll]  [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)]     [C:\Program Files\DZH5\internet\borlndmm.dll]  [Inprise Corporation, 5.0.6.18]     [C:\WINDOWS\system32\comctl32.dll]  [Microsoft Corporation, 5.82 (xpsp.060825-0040)]     [C:\WINDOWS\system32\shell32.dll]  [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316)]     [C:\WINDOWS\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\wininet.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\urlmon.dll]  [Microsoft Corporation, 6.00.2900.3072 (xpsp_sp2_gdr.070124-2319)]     [C:\Program Files\DZH5\internet\tcpip.dll]  [, 1, 0, 0, 1]     [C:\Program Files\DZH5\wt\gtja\fy\bin\flyingfish.dll]  [N/A, ]     [C:\Program Files\DZH5\internet\investdll.dll]  [, 1, 0, 0, 3]     [C:\Program Files\DZH5\internet\wgdll.dll]  [N/A, ]     [C:\Program Files\DZH5\internet\zlib.dll]  [N/A, ]     [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\Program Files\DZH5\internet\olepro32.dll]  [Microsoft Corporation, 5.0.4275]     [C:\WINDOWS\system32\imon.dll]  [Eset , 2, 70, 32 ]     [C:\Program Files\Eset\pr_imon.dll]  [N/A, ]     [C:\WINDOWS\system32\DNSAPI.dll]  [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)]     [C:\WINDOWS\system32\rasadhlp.dll]  [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)] [PID: 4016 / Astrnova][D:\Program Files\Tencent\QQ\QQ.exe]  [TENCENT, 7,0,431,1723]     [C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)]     [D:\Program Files\Tencent\QQ\QQBaseClassInDll.dll]  [TENCENT, 7,0,431,1723]     [D:\Program Files\Tencent\QQ\QQHelperDll.dll]  [TENCENT, 7,0,431,1723]     [D:\Program Files\Tencent\QQ\BasicCtrlDll.dll]  [TENCENT, 7, 0, 431, 1723]     [C:\WINDOWS\system32\USER32.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427)]     [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316)]     [C:\WINDOWS\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\COMCTL32.dll]  [Microsoft Corporation, 5.82 (xpsp.060825-0040)]     [C:\WINDOWS\system32\ole32.dll]  [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)]     [C:\WINDOWS\system32\WININET.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\NETAPI32.dll]  [Microsoft Corporation, 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106)]     [C:\WINDOWS\system32\iphlpapi.dll]  [Microsoft Corporation, 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003)]     [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]     [D:\Program Files\Tencent\QQ\QQAPI.dll]  [TENCENT, 7,0,431,1723]     [C:\WINDOWS\system32\CLBCATQ.DLL]  [Microsoft Corporation, 2001.12.4414.308]     [C:\WINDOWS\system32\xpsp2res.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [D:\Program Files\Tencent\QQ\TIMProxy.dll]  [tencent, 0, 3, 2, 4]     [C:\WINDOWS\system32\SXS.DLL]  [Microsoft Corporation, 5.1.2600.3019 (xpsp_sp2_gdr.061019-0414)]     [D:\Program Files\Tencent\QQ\LoginCtrl.dll]  [TENCENT, 7,0,431,1723]     [D:\Program Files\Tencent\QQ\LoginCtrlRes.dll]  [TENCENT, 7,0,431,1723]     [D:\Program Files\Tencent\QQ\QQRes.dll]  [TENCENT, 7,0,431,1723]     [D:\Program Files\Tencent\QQ\QQMainFrame.dll]  [N/A, ]     [C:\WINDOWS\system32\urlmon.dll]  [Microsoft Corporation, 6.00.2900.3072 (xpsp_sp2_gdr.070124-2319)]     [D:\Program Files\Tencent\QQ\UnReadMsgMgr.dll]  [N/A, ]     [D:\Program Files\Tencent\QQ\CQQApplication.dll]  [N/A, ]     [D:\Program Files\Tencent\QQ\FlashAvatarDll.dll]  [, 1, 4, 0, 1]     [D:\Program Files\Tencent\QQ\NewSkin.dll]  [TENCENT, 7,0,431,1723]     [D:\Program Files\Tencent\QQ\MailSummary.dll]  [TENCENT, 7,0,431,1723]     [D:\Program Files\Tencent\QQ\QQKnowledgeSearch.dll]  [TENCENT, 7,0,431,1723]     [C:\WINDOWS\system32\imon.dll]  [Eset , 2, 70, 32 ]     [C:\Program Files\Eset\pr_imon.dll]  [N/A, ]     [C:\WINDOWS\system32\DNSAPI.dll]  [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)]     [C:\WINDOWS\system32\rasadhlp.dll]  [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)]     [D:\Program Files\Tencent\QQ\QQAllInOne.dll]  [TENCENT, 7,0,431,1723]     [D:\Program Files\Tencent\QQ\SCCore.dll]  [TENCENT, 1, 6, 0, 2]     [D:\Program Files\Tencent\QQ\CameraDll.dll]  [TENCENT, 7,0,431,1723]     [D:\Program Files\Tencent\QQ\QQSpace.dll]  [TENCENT, 7,0,431,1723]     [C:\WINDOWS\system32\msdmo.dll]  [, ]     [D:\Program Files\Tencent\QQ\QQGroupMng.dll]  [TENCENT, 7,0,431,1723]     [D:\Program Files\Tencent\QQ\QQSysMsgMng.dll]  [N/A, ]     [D:\Program Files\Tencent\QQ\UserDefinedHead.dll]  [TENCENT, 7,0,431,1723]     [D:\Program Files\Tencent\QQ\QQPlugin.dll]  [N/A, ]     [D:\Program Files\Tencent\QQ\QQConfigPlugin.dll]  [TENCENT, 7,0,431,1723]     [D:\Program Files\Tencent\QQ\QQAvatar.dll]  [N/A, ]     [D:\Program Files\Tencent\QQ\QQCustomFace.dll]  [N/A, ]     [C:\WINDOWS\system32\shdocvw.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [D:\Program Files\Tencent\QQ\QRingMng.dll]  [N/A, ]     [D:\Program Files\Tencent\QQ\LongConnection.dll]  [TENCENT, 7,0,431,1723]     [C:\WINDOWS\system32\mlang.dll]  [Microsoft Corporation, 6.00.2900.2530 (xpsp.040919-1030)]     [D:\Program Files\Tencent\QQ\PhoneAPI.dll]  [TENCENT, 7,0,431,1723]     [D:\Program Files\Tencent\QQ\DialerAllinOne.dll]  [tencent, 1, 4, 0, 0]     [D:\Program Files\Tencent\QQ\QQPet.dll]  [TENCENT, 7,0,431,1723]     [D:\Program Files\Tencent\QQ\BQQApplication.dll]  [N/A, ]     [D:\Program Files\Tencent\QQ\GroupConnection.dll]  [TENCENT, 7,0,431,1723]     [D:\Program Files\Tencent\QQ\CommercesMng.dll]  [TENCENT, 7,0,431,1723]     [D:\Program Files\Tencent\QQ\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]     [D:\Program Files\Tencent\QQ\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 310]     [D:\Program Files\Tencent\QQ\QQSceneMng.dll]  [N/A, ]     [D:\Program Files\Tencent\QQ\AddrSearch.dll]  [腾讯科技（深圳）有限公司, 2, 2, 1, 15]     [C:\WINDOWS\system32\LINKINFO.dll]  [Microsoft Corporation, 5.1.2600.2751 (xpsp_sp2_gdr.050831-1520)] [PID: 3116 / Astrnova][D:\Program Files\Tencent\QQ\TIMPlatform.exe]  [TENCENT, 7,0,431,1723]     [C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)]     [C:\WINDOWS\system32\USER32.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427)]     [C:\WINDOWS\system32\ole32.dll]  [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)]     [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\CLBCATQ.DLL]  [Microsoft Corporation, 2001.12.4414.308]     [C:\WINDOWS\system32\xpsp2res.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [D:\Program Files\Tencent\QQ\TIMProxy.dll]  [tencent, 0, 3, 2, 4]     [C:\WINDOWS\system32\SXS.DLL]  [Microsoft Corporation, 5.1.2600.3019 (xpsp_sp2_gdr.061019-0414)]     [C:\Program Files\DZH5\WT\GTJA\FY\bin\vcltrade.dll]  [N/A, ] [PID: 1836 / Astrnova][C:\Program Files\Maxthon2\Maxthon.exe]  [Maxthon International ltd., 2, 1, 2, 649]     [C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)]     [C:\WINDOWS\system32\WININET.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\USER32.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427)]     [C:\WINDOWS\system32\ole32.dll]  [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)]     [C:\WINDOWS\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\iphlpapi.dll]  [Microsoft Corporation, 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003)]     [C:\WINDOWS\system32\NETAPI32.dll]  [Microsoft Corporation, 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106)]     [C:\Program Files\Maxthon2\mxpp.dll]  [Maxthon International ltd., 1, 0, 0, 117]     [C:\Program Files\Maxthon2\MxSk.dll]  [Maxthon, 1, 0, 0, 358]     [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316)]     [C:\WINDOWS\system32\urlmon.dll]  [Microsoft Corporation, 6.00.2900.3072 (xpsp_sp2_gdr.070124-2319)]     [C:\Program Files\Maxthon2\MxProxy2.dll]  [Maxthon International ltd., 1, 0, 0, 4033]     [C:\Program Files\Maxthon2\MxExt.dll]  [N/A, ]     [C:\Program Files\Maxthon2\MxUI.dll]  [Maxthon International, 3, 3, 0, 3]     [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\Program Files\Maxthon2\mxtool.dll]  [, 1, 0, 0, 1]     [C:\Program Files\Maxthon2\maxzlib.dll]  [, 1.2.3]     [C:\WINDOWS\system32\CLBCATQ.DLL]  [Microsoft Corporation, 2001.12.4414.308]     [C:\WINDOWS\system32\RICHED20.dll]  [Microsoft Corporation, 5.30.23.1228]     [C:\WINDOWS\system32\msxml3.dll]  [Microsoft Corporation, 8.70.1113.0]     [C:\WINDOWS\system32\xpsp2res.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\browseui.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\mlang.dll]  [Microsoft Corporation, 6.00.2900.2530 (xpsp.040919-1030)]     [C:\Program Files\Maxthon2\Modules\MxPageSearch\MxPageSearch.dll]  [Maxthon International ltd., 1,0,0,1330]     [C:\Program Files\Maxthon2\Modules\MxWebBoost\MxWebBoost.dll]  [Maxthon, 1,0,2,1259]     [C:\Program Files\Maxthon2\mxdb.dll]  [Max, 3, 5, 3, 125]     [C:\WINDOWS\system32\shdocvw.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\SXS.DLL]  [Microsoft Corporation, 5.1.2600.3019 (xpsp_sp2_gdr.061019-0414)]     [C:\WINDOWS\system32\imon.dll]  [Eset , 2, 70, 32 ]     [C:\Program Files\Eset\pr_imon.dll]  [N/A, ]     [C:\WINDOWS\system32\DNSAPI.dll]  [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)]     [C:\WINDOWS\system32\rasadhlp.dll]  [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)]     [C:\Program Files\Maxthon2\Modules\MxHistory\MxHistory.dll]  [Maxthon International ltd., 1, 0, 0, 7]     [C:\WINDOWS\system32\shdoclc.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\mshtml.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\jscript.dll]  [Microsoft Corporation, 5.6.0.8831]     [C:\Program Files\Common Files\System\msadc\msadco.dll]  [Microsoft Corporation, 2.81.1124.0 (xpsp_sp2_gdr.060322-1613)]     [C:\Program Files\Maxthon2\MxFav.dll]  [Maxthon International ltd., 1, 0, 0, 257]     [C:\WINDOWS\system32\pngfilt.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx]  [Adobe Systems, Inc., 9,0,124,0]     [C:\WINDOWS\system32\mshtmled.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\dxtrans.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\dxtmsft.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\quartz.dll]  [Microsoft Corporation, 6.05.2600.2749]     [C:\WINDOWS\system32\msdmo.dll]  [, ]     [C:\WINDOWS\system32\iepeers.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\winabc.ime]  [PKUETI, 5.22.216]     [C:\WINDOWS\system32\MSRATING.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)] [PID: 3464 / Astrnova][E:\软件\扫描日志工具\sreng2\SREngLdr.EXE]  [Smallfrogs Studio, 2.6.12.1018]     [C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)]     [C:\WINDOWS\system32\user32.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427)] [PID: 3588 / Astrnova][E:\软件\扫描日志工具\sreng2\SRE906fb410.EXE]  [Smallfrogs Studio, 2.6.12.1018]     [C:\WINDOWS\system32\kernel32.dll]  [Microsoft Corporation, 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)]     [C:\WINDOWS\system32\USER32.dll]  [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)]     [C:\WINDOWS\system32\GDI32.dll]  [Microsoft Corporation, 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427)]     [C:\WINDOWS\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316)]     [C:\WINDOWS\system32\oledlg.dll]  [Microsoft Corporation, 1.0 (xpsp_sp2_gdr.061016-0148)]     [C:\WINDOWS\system32\ole32.dll]  [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)]     [C:\WINDOWS\system32\WININET.dll]  [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)]     [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\RICHED20.DLL]  [Microsoft Corporation, 5.30.23.1228]     [C:\WINDOWS\system32\sfc_os.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\WINDOWS\system32\NETAPI32.dll]  [Microsoft Corporation, 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106)]     [C:\WINDOWS\system32\urlmon.dll]  [Microsoft Corporation, 6.00.2900.3072 (xpsp_sp2_gdr.070124-2319)]     [C:\WINDOWS\system32\DNSAPI.dll]  [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)]     [C:\WINDOWS\system32\rasadhlp.dll]  [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)]     [C:\WINDOWS\system32\imon.dll]  [Eset , 2, 70, 32 ]     [C:\Program Files\Eset\pr_imon.dll]  [N/A, ]     [C:\WINDOWS\system32\xpsp2res.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]JdW!K)eu#c5J
================================== 文件关联 .TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE  OK. ["%1" %*] .COM  OK. ["%1" %*] .PIF  OK. ["%1" %*] .REG  OK. [regedit.exe "%1"] .BAT  OK. ["%1" %*] .SCR  OK. ["%1" /S] .CHM  OK. ["C:\WINDOWS\hh.exe" %1] .HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1] .INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*] .JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*] .LNK  OK. [{00021401-0000-0000-C000-000000000046}]Q1xE2Z+XYM
================================== Winsock 提供者 NOD32 protected [MSAFD Tcpip [TCP/IP]]     C:\WINDOWS\system32\imon.dll(Eset , NOD32 IMON - Internet scanning support) NOD32 protected [MSAFD Tcpip [UDP/IP]]     C:\WINDOWS\system32\imon.dll(Eset , NOD32 IMON - Internet scanning support) NOD32 protected [MSAFD Tcpip [RAW/IP]]     C:\WINDOWS\system32\imon.dll(Eset , NOD32 IMON - Internet scanning support) NOD32 protected [RSVP UDP Service Provider]     C:\WINDOWS\system32\imon.dll(Eset , NOD32 IMON - Internet scanning support) NOD32 protected [RSVP TCP Service Provider]     C:\WINDOWS\system32\imon.dll(Eset , NOD32 IMON - Internet scanning support) NOD32     C:\WINDOWS\system32\imon.dll(Eset , NOD32 IMON - Internet scanning support)
================================== Autorun.inf N/A6CW6Z$i wvt:Jl!}
================================== HOSTS 文件 127.0.0.1       localhost)QP`.h4|,{
================================== 进程特权扫描 特殊特权被允许： SeLoadDriverPrivilege [PID = 1440, C:\WINDOWS\SYSTEM32\SPOOLSV.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 1568, D:\PROGRAM FILES\HUNTMINE\HUNTMINESVR.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 528, C:\PROGRAM FILES\ESET\NOD32KUI.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 1420, C:\PROGRAM FILES\ADOBE\ACROBAT 7.0\DISTILLR\ACROTRAY.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 1180, C:\PROGRAM FILES\DZH5\INTERNET\HYPWISE.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 4084, C:\PROGRAM FILES\DZH5\INTERNET\HYPMAIN.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 3464, E:\软件\扫描日志工具\SRENG2\SRENGLDR.EXE]
================================== API HOOK N/AQfb"nr{6qo
================================== 隐藏进程 N/AU+U2h \s
==================================@ ab tG.r7?
 [/CODE]+[&enf0bp.xuy@
 A)o3XQ0e Juo+\
 
 Q3R Z kHx(]J
 
这个是我扫的日志

stanton 发表于 2008-7-16 15:08

楼主装了天网和ARP防火墙？装的安全软件太多了未必能起到很好的保护作用。:@28#

ngc0717 发表于 2008-7-16 16:01

<H3 style="MARGIN: auto 0cm">[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]     <load><>  [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]     <Cmaudio><RunDll32 cmicnfg.cpl,CMICtrlWnd>  [N/A] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]     <AppInit_DLLs><>  [N/A] 楼主要注意以上键值地方，中木马后杀掉还有未修复的地方。你最好打开启动项查看下有无异常， 打开运行——msconfig——查看启动里面有无异常，用楼主的那个软件SRE也可以查看下。 楼主说的那个病毒下载链接我看过了，那个是漏洞利用型的木马链接，楼主电脑里面的补丁没有打 全吧。比如 Adobe Flash Player、IE漏洞。楼主那个office2003的数据报表漏洞是否被修不了？ 被病毒利用了漏洞。建议用360安全卫士检查系统漏洞情况。。。修补系统漏洞比安装杀软更重要啊 EXP/Flash.Gen is a generic detection routine designed to detect the exploitati。。on of a remote code execution vulnerability in Adobe Flash Player. It was developed in order to detect unknown variants of malicious Flash content and will be continuously enhanced if needed。 这段英文就描述了楼主连接木马的利用漏洞传播的。。。 其实楼主的电脑里面现在装的东西并不多，nod32+天网防火墙+彩影ARP防火墙，这两个防火墙有那 么一点冲突，我觉的金山的ARP防火墙很不错的，比360ARP防火墙强多了，相当于企业级了。。 我推荐用。。因为我测试过了。。对于天网防火墙，我是觉得装了作用不是很大。。可以换其他的墙。 楼主可以用ESS套装，或者装小红伞也不错。。。。。。 </H3>
p$X$vk.w
[[i] 本帖最后由 ngc0717 于 2008-7-16 16:05 编辑 [/i]]

ngc0717 发表于 2008-7-16 16:06

不好意思。。上面的不知道怎么搞的。。弄成那样了。。。呵呵。。再发一遍。。。!js\h.c/|L_
  nW Q)rl6e\
 
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]     <load><>  [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]     <Cmaudio><RunDll32 cmicnfg.cpl,CMICtrlWnd>  [N/A] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]     <AppInit_DLLs><>  [N/A]
 楼主要注意以上键值地方，中木马后杀掉还有未修复的地方。你最好打开启动项查看下有无异常，
 打开运行——msconfig——查看启动里面有无异常，用楼主的那个软件SRE也可以查看下。
 楼主说的那个病毒下载链接我看过了，那个是漏洞利用型的木马链接，楼主电脑里面的补丁没有打(n C1X3X:s C{
 全吧。比如 Adobe Flash Player、IE漏洞。楼主那个office2003的数据报表漏洞是否被修不了？
 被病毒利用了漏洞。建议用360安全卫士检查系统漏洞情况。。。修补系统漏洞比安装杀软更重要啊
 EXP/Flash.Gen is a generic detection routine designed to detect the exploitati。。on of a remote code execution 
 [cPq+i*pM4W
vulnerability in Adobe Flash Player. It was developed in order to detect unknown variants of malicious Flash content 
 
and will be continuously enhanced if needed。
 这段英文就描述了楼主连接木马的利用漏洞传播的。。。QbD^B d!KL5WJ
 其实楼主的电脑里面现在装的东西并不多，nod32+天网防火墙+彩影ARP防火墙，这两个防火墙有那(SW \)}+a
 么一点冲突，我觉的金山的ARP防火墙很不错的，比360ARP防火墙强多了，相当于企业级了。。7w:TA}C{aGQ
 我推荐用。。因为我测试过了。。对于天网防火墙，我是觉得装了作用不是很大。。可以换其他的墙。n&N(ZRx$oQ
 楼主可以用ESS套装，或者装小红伞也不错。。。。。。

数码先行 发表于 2008-7-16 19:13

呵呵　，我以为那个是楼上特意那么发的呢还在想，是怎么发出来的呢，

ngc0717 发表于 2008-7-17 13:36

当你打开论坛主页时。。会有如下图条出现。。
 
[attach]48547[/attach]
 1B?bVwUu
上面之所以会出现那样情况就是因为我是现在自己WORD里面写分析时，所用的字体恰好和这个图标里面的字体相匹
 
配，而出现蓝色版面。。。由于排版就排成那样。。所以改不会来。。。呵呵。。
 %XzOIE+b1q J

数码先行 发表于 2008-7-17 14:52

哦，是这回事呀，呵呵　，学习了，

thomasshi 发表于 2008-7-18 10:30

防ARP的软件其实都不起作用的,无非告你谁在冒充网关,对网速影响依然存在.%a1d6PD[
j.{+M8x K0Zx
像在家上网就不会有这种事,网管能定点关发包的端口

页: [1]

卡巴斯基技术论坛's Archiver

达人帮我看一下,卡巴主动防御注册表的问题