手动解决瑞星被K后无法正常升级启动

载入中…

手动解决瑞星被K后无法正常升级启动
作者：佚名文章来源：本站原创点击数：更新时间：2008-3-23
病毒扫描报告分析：以下内容是SReng扫描报告：启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Windows Publisher] <WinShell><"C:\WINDOWS\system32\Rundll32.exe" "C:\WINDOWS\system32\shell32.dll",Control_RunDLL "C:\DOCUME~1\lily\LOCALS~1\Temp\dat36.tmp"> [N/A] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Windows Publisher] <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [(Verified)Microsoft Windows Publisher] <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [(Verified)Microsoft Windows Publisher] <IntelZeroConfig><"C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"> [Intel Corporation] <ATICCC><"C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay> [N/A] <SynTPEnh><C:\Program Files\Synaptics\SynTP\SynTPEnh.exe> [(Verified)Microsoft Windows Hardware Compatibility Publisher] <SigmatelSysTrayApp><stsystra.exe> [SigmaTel, Inc.] <RfwMain><"C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup> [(Verified)BEIJING RISING SCIENCE AND TECHNOLOGY CORPORATION LIMITED] <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system> [(Verified)Beijing Rising Science and Technology Corporation Limited] <upxdnd><C:\WINDOWS\upxdnd.exe> [] <faaefanp><C:\WINDOWS\aeaptnlu.exe> [] <msccrt><C:\WINDOWS\msccrt.exe> [] <cmdbcs><C:\WINDOWS\cmdbcs.exe> [] <WSockDrv32><C:\WINDOWS\WSockDrv32.exe> [] <DbgHlp32><C:\WINDOWS\DbgHlp32.exe> [] <LotusHlp><C:\WINDOWS\LotusHlp.exe> [] <PTSShell><C:\WINDOWS\PTSShell.exe> [] <SHAProc><C:\WINDOWS\SHAProc.exe> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [(Verified)Microsoft Windows Component Publisher] <Userinit><userinit.exe,> [(Verified)Microsoft Windows Publisher] <UIHost><logonui.exe> [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll> [(Verified)Beijing Rising Science and Technology Corporation Limited] <{7FA4A83B-F99A-4bfc-A8E2-6A62B05D2C82}><C:\DOCUME~1\lily\LOCALS~1\Temp\dat36.tmp> [] <{50632D5C-B71B-4ba0-B012-3DC6F15C011B}><C:\WINDOWS\system32\msosiocp.dll> [N/A] <{D29DCEE0-457B-45A2-A92D-741B95B7723B}><C:\Program Files\Internet Explorer\PLUGINS\Ns_Sys55.Sys> [] <{5E907A48-400E-4EA8-9792-FFAE052D59E9}><C:\WINDOWS\system32\pedadt.dll> [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] <WPDShServiceObj><C:\WINDOWS\system32\WPDShServiceObj.dll> [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}] <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT> [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}] <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser> [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}] <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub> [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}] <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}] <N/A><C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install> [Microsoft Corporation] ================================== 启动文件夹 N/A ================================== 服务 [Application Management / AppMgmt][Stopped/Manual Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\appmgmts.dll><N/A> [ASP.NET State Service / aspnet_state][Stopped/Manual Start] <C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe><Microsoft Corporation> [Ati HotKey Poller / Ati HotKey Poller][Running/Auto Start] <C:\WINDOWS\system32\Ati2evxx.exe><ATI Technologies Inc.> [AutoComplete Service / Autocomplete][Stopped/Manual Start] <C:\Program Files\Acesoft\Tracks Eraser Pro\delautocomp.exe><Acesoft> [Intel(R) PROSet/Wireless Event Log / EvtEng][Running/Auto Start] <C:\Program Files\Intel\Wireless\Bin\EvtEng.exe><Intel Corporation> [Human Interface Device Access / HidServ][Stopped/Disabled] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A> [InstallDriver Table Manager / IDriverT][Stopped/Manual Start] <"C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe"><Macrovision Corporation> [Intel(R) PROSet/Wireless Registry Service / RegSrvc][Running/Auto Start] <C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe><Intel Corporation> [Rising Proxy Service / RfwProxySrv][Stopped/Auto Start] <c:\program files\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.> [Rising Personal Firewall Service / RfwService][Stopped/Auto Start] <c:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.> [Rising Process Communication Center / RsCCenter][Stopped/Auto Start] <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.> [Rising RealTime Monitor / RsRavMon][Stopped/Auto Start] <"C:\PROGRAM FILES\RISING\RAV\Ravmond.exe"><Beijing Rising Technology Co., Ltd.> [Intel(R) PROSet/Wireless Service / S24EventMonitor][Running/Auto Start] <C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe><Intel Corporation> [TuneUp WinStyler Theme Service / TUWinStylerThemeSvc][Stopped/Manual Start] <"C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe"><TuneUp Software GmbH> [Intel(R) PROSet/Wireless SSO Service / WLANKEEPER][Running/Auto Start] <C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe><Intel(R) Corporation> [Windows Live Setup Service / WLSetupSvc][Stopped/Manual Start] <"C:\Program Files\Windows Live\installer\WLSetupSvc.exe"><Microsoft Corporation> [DB5DC8CD / DB5DC8CD][Stopped/Auto Start] <C:\WINDOWS\system32\FB8AE46A.EXE -d><Microsoft Corporation> ================================== 驱动程序 [AEGIS Protocol (IEEE 802.1x) v3.4.9.0 / AegisP][Running/Auto Start] <system32\DRIVERS\AegisP.sys><Meetinghouse Data Communications> [ati2mtag / ati2mtag][Running/Manual Start] <system32\DRIVERS\ati2mtag.sys><ATI Technologies Inc.> [Broadcom 440x 10/100 Integrated Controller XP Driver / bcm4sbxp][Running/Manual Start] <system32\DRIVERS\bcm4sbxp.sys><Broadcom Corporation> [drop / drop][Stopped/Auto Start] <\??\C:\DOCUME~1\lily\LOCALS~1\Temp\tmp2C.tmp><N/A> [drvmcdb / drvmcdb][Running/Boot Start] <\SystemRoot\system32\drivers\drvmcdb.sys><Sonic Solutions> [drvnddm / drvnddm][Running/Auto Start] <system32\drivers\drvnddm.sys><Sonic Solutions> [fpids32 / fpids32][Running/Auto Start] <\??\C:\WINDOWS\system32\drivers\msosfpids32.sys><N/A> [Microsoft UAA Bus Driver for High Definition Audio / HDAudBus][Running/Manual Start] <system32\DRIVERS\HDAudBus.sys><Windows (R) Server 2003 DDK provider> [HookCont / HookCont][Running/System Start] <\SystemRoot\system32\drivers\HookCont.sys><Beijing Rising Technology Co., Ltd> [HookNtos / HookNtos][Running/System Start] <\SystemRoot\system32\drivers\HookNtos.sys><Beijing Rising Technology Co., Ltd> [HookReg / HookReg][Running/System Start] <\SystemRoot\system32\drivers\HookReg.sys><Beijing Rising Technology Co., Ltd> [HookSys / HookSys][Running/System Start] <\SystemRoot\system32\drivers\HookSys.sys><Beijing Rising Technology Co., Ltd> [HookUrl / HookUrl][Running/Auto Start] <\??\C:\Program Files\Rising\Rfw\HookUrl.sys><Beijing Rising Technology Co., Ltd.> [HSF_DPV / HSF_DPV][Running/Manual Start] <system32\DRIVERS\HSX_DPV.sys><Conexant Systems, Inc.> [HSXHWAZL / HSXHWAZL][Running/Manual Start] <system32\DRIVERS\HSXHWAZL.sys><Conexant Systems, Inc.> [mdmxsdk / mdmxsdk][Running/Auto Start] <system32\DRIVERS\mdmxsdk.sys><Conexant> [npkcrypt / npkcrypt][Running/Auto Start] <\??\C:\Program Files\Tencent\QQ\npkcrypt.sys><INCA Internet Co., Ltd.> [OMCI / OMCI][Running/System Start] <\SystemRoot\SYSTEM32\DRIVERS\OMCI.SYS><Dell Computer Corporation> [Padus ASPI Shell / pfc][Running/Manual Start] <system32\drivers\pfc.sys><Padus, Inc.> [Direct Parallel Link Driver / Ptilink][Running/Manual Start] <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.> [PxHelp20 / PxHelp20][Running/Boot Start] <\SystemRoot\System32\Drivers\PxHelp20.sys><Sonic Solutions> [Rising Rfwbase Driver / RfwBase][Running/Auto Start] <System32\DRIVERS\rfwbase.SYS><Beijing Rising Technology Co., Ltd.> [rimmptsk / rimmptsk][Running/Manual Start] <system32\DRIVERS\rimmptsk.sys><REDC> [rimsptsk / rimsptsk][Running/Manual Start] <system32\DRIVERS\rimsptsk.sys><REDC> [Ricoh xD-Picture Card Driver / rismxdp][Running/Manual Start] <system32\DRIVERS\rixdptsk.sys><REDC> [RsFwDrv / RsFwDrv][Running/System Start] <\??\C:\Program Files\Rising\Rfw\RsFwDrv.sys><Beijing Rising Technology Co., Ltd.> [RsNTGDI / RsNTGDI][Running/Boot Start] <\SystemRoot\system32\Drivers\RsNTGdi.sys><Beijing Rising Technology Co., Ltd.> [WLAN 传输 / s24trans][Running/Auto Start] <system32\DRIVERS\s24trans.sys><Intel Corporation> [Sc Manager / Sc Manager][Stopped/Manual Start] <\??\C:\DOCUME~1\lily\LOCALS~1\Temp\usbcams3.sys><N/A> [Secdrv / Secdrv][Stopped/Manual Start] <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.> [sscdbhk5 / sscdbhk5][Running/System Start] <system32\drivers\sscdbhk5.sys><Sonic Solutions> [ssrtln / ssrtln][Running/System Start] <system32\drivers\ssrtln.sys><Sonic Solutions> [SigmaTel High Definition Audio CODEC / STHDA][Running/Manual Start] <system32\drivers\sthda.sys><SigmaTel, Inc.> [Synaptics TouchPad Driver / SynTP][Running/Manual Start] <system32\DRIVERS\SynTP.sys><Synaptics, Inc.> [tfsnboio / tfsnboio][Running/Auto Start] <system32\dla\tfsnboio.sys><Sonic Solutions> [tfsncofs / tfsncofs][Running/Auto Start] <system32\dla\tfsncofs.sys><Sonic Solutions> [tfsndrct / tfsndrct][Running/Auto Start] <system32\dla\tfsndrct.sys><Sonic Solutions> [tfsndres / tfsndres][Running/Auto Start] <system32\dla\tfsndres.sys><Sonic Solutions> [tfsnifs / tfsnifs][Running/Auto Start] <system32\dla\tfsnifs.sys><Sonic Solutions> [tfsnopio / tfsnopio][Running/Auto Start] <system32\dla\tfsnopio.sys><Sonic Solutions> [tfsnpool / tfsnpool][Running/Auto Start] <system32\dla\tfsnpool.sys><Sonic Solutions> [tfsnudf / tfsnudf][Running/Auto Start] <system32\dla\tfsnudf.sys><Sonic Solutions> [tfsnudfa / tfsnudfa][Running/Auto Start] <system32\dla\tfsnudfa.sys><Sonic Solutions> [Conexant Setup API / UIUSys][Stopped/Manual Start] <system32\DRIVERS\UIUSYS.SYS><N/A> [Intel(R) PRO/Wireless 3945ABG Adapter Driver / w39n51][Running/Manual Start] <system32\DRIVERS\w39n51.sys><Intel? Corporation> [winachsf / winachsf][Running/Manual Start] <system32\DRIVERS\HSX_CNXT.sys><Conexant Systems, Inc.> [WinDriver6 / WinDriver6][Running/Manual Start] <system32\drivers\windrvr6.sys><Jungo> ================================== 浏览器加载项 [ThunderAtOnce Class] {01443AEC-0FD1-40fd-9C87-E93D1494C233} <C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll, Thunder Networking Technologies,LTD> [Adobe PDF Reader Link Helper] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated> [DriveLetterAccess] {5CA3D70E-1895-11CF-8E15-001234567890} <C:\WINDOWS\system32\dla\tfswshx.dll, Sonic Solutions> [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} <C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll, Thunder Networking Technologies,LTD> [Windows Live 登录帮助程序] {9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, Microsoft Corporation> [Windows Live Toolbar Helper] {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} <C:\Program Files\Windows Live Toolbar\msntb.dll, Microsoft Corporation> [] {D29DCEE0-457B-45A2-A92D-741B95B7723B} <C:\Program Files\Internet Explorer\PLUGINS\Ns_Sys55.Sys, N/A> [bho Class] {ED8DFC5C-10EF-45AB-9DC2-0639AFF5A270} <C:\PROGRA~1\COMMON~1\Wnwb\wnwbio.dll, 深圳世强软件开发部> [启动迅雷5] {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <C:\Program Files\Thunder Network\Thunder\Thunder.exe, Thunder Networking Technologies,LTD> [BlogThisToolbarButton Class] {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} <C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll, Microsoft Corporation> [豪杰超级解霸V8] {367E0A21-8601-4986-9C9A-153BF5ACA118} <C:\Herosoft\HeroV8\STHSDVD.EXE, N/A> [Messenger] {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation> [Windows Live Toolbar] {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} <C:\Program Files\Windows Live Toolbar\msntb.dll, Microsoft Corporation> [Java Plug-in 1.4.2_03] {8AD9C840-044E-11D1-B3E9-00805F499D93} <C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll, JavaSoft / Sun Microsystems, Inc.> [Java Plug-in 1.4.2_03] {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} <C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll, JavaSoft / Sun Microsystems, Inc.> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9e.ocx, Adobe Systems, Inc.> [PasswordEditCtrl Class] {E787FD25-8D7C-4693-AE67-9406BC6E22DF} <C:\WINDOWS\system32\qqedit\qqedit.dll, 腾讯科技（深圳）有限公司> [ThunderAtOnce Class] {01443AEC-0FD1-40FD-9C87-E93D1494C233} <C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll, Thunder Networking Technologies,LTD> [Adobe PDF Reader Link Helper] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated> [DriveLetterAccess] {5CA3D70E-1895-11CF-8E15-001234567890} <C:\WINDOWS\system32\dla\tfswshx.dll, Sonic Solutions> [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} <C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll, Thunder Networking Technologies,LTD> [Windows Live 登录帮助程序] {9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, Microsoft Corporation> [Windows Live Toolbar Helper] {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} <C:\Program Files\Windows Live Toolbar\msntb.dll, Microsoft Corporation> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9e.ocx, Adobe Systems, Inc.> [] {D29DCEE0-457B-45A2-A92D-741B95B7723B} <C:\Program Files\Internet Explorer\PLUGINS\Ns_Sys55.Sys, N/A> [bho Class] {ED8DFC5C-10EF-45AB-9DC2-0639AFF5A270} <C:\PROGRA~1\COMMON~1\Wnwb\wnwbio.dll, 深圳世强软件开发部> [&Windows Live Search] <res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm, N/A> [Add to Windows &Live Favorites] <http://favorites.live.com/quickadd.aspx, N/A> [使用迅雷下载] <C:\Program Files\Thunder Network\Thunder\Program\geturl.htm, N/A> [使用迅雷下载全部链接] <C:\Program Files\Thunder Network\Thunder\Program\getallurl.htm, N/A> [添加到QQ表情] <C:\Program Files\Tencent\QQ\AddEmotion.htm, N/A> [百度Flash搜索] <res://C:\WINDOWS\DOWNLO~1\BaiDuBar.dll/FLASHSEARCH.HTM, N/A> [百度mp3搜索] <res://C:\WINDOWS\DOWNLO~1\BaiDuBar.dll/BAIDUMP3.HTM, N/A> [百度信息快递搜索] <res://C:\WINDOWS\DOWNLO~1\BaiDuBar.dll/BAIDUIE.HTM, N/A> [百度图片搜索] <res://C:\WINDOWS\DOWNLO~1\BaiDuBar.dll/BAIDUIMG.HTM, N/A> [百度搜索] <res://C:\WINDOWS\DOWNLO~1\BaiDuBar.dll/BAIDUSEARCH.HTM, N/A> [百度新闻搜索] <res://C:\WINDOWS\DOWNLO~1\BaiDuBar.dll/BAIDUNEWS.HTM, N/A> [豪杰超级解霸V8实时播放] <C:\Herosoft\HeroV8\MPURLGET.HTM, N/A> ================================== 正在运行的进程 [PID: 800 / SYSTEM][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 868 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\88DFCFFB.DLL] [Microsoft Corporation, ] [PID: 900 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\Ati2evxx.dll] [ATI Technologies Inc., 6.14.10.4129] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\DOCUME~1\lily\LOCALS~1\Temp\dat1D.tmp] [, 1, 0, 0, 1] [C:\DOCUME~1\lily\LOCALS~1\Temp\dat36.tmp] [, 1, 0, 0, 1] [C:\WINDOWS\system32\88DFCFFB.DLL] [Microsoft Corporation, ] [PID: 944 / SYSTEM][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\AppPatch\AcAdProc.dll] [Microsoft Corporation, 5.1.2600.3008 (xpsp.061004-0027)] [C:\WINDOWS\system32\88DFCFFB.DLL] [Microsoft Corporation, ] [PID: 956 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\88DFCFFB.DLL] [Microsoft Corporation, ] [PID: 1136 / SYSTEM][C:\WINDOWS\system32\Ati2evxx.exe] [ATI Technologies Inc., 6.14.10.4129] [C:\WINDOWS\system32\Ati2edxx.dll] [ATI Technologies, Inc., 6, 14, 10, 2500] [C:\WINDOWS\system32\88DFCFFB.DLL] [Microsoft Corporation, ] [PID: 1152 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\88DFCFFB.DLL] [Microsoft Corporation, ] [PID: 1240 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\88DFCFFB.DLL] [Microsoft Corporation, ] [PID: 1368 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\wups2.dll] [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)] [C:\WINDOWS\system32\88DFCFFB.DLL] [Microsoft Corporation, ] [PID: 1424 / SYSTEM][C:\Program Files\Intel\Wireless\Bin\EvtEng.exe] [Intel Corporation, 10, 1, 0, 1] [C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll] [Intel Corporation, 10, 1, 0, 2] [C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL] [Intel Corporation, 10, 1, 0, 5] [C:\WINDOWS\system32\88DFCFFB.DLL] [Microsoft Corporation, ] [PID: 1448 / SYSTEM][C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe] [Intel Corporation , 10, 1, 0, 33] [C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL] [Intel Corporation, 10, 1, 0, 5] [C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll] [Intel Corporation, 10, 1, 0, 2] [C:\Program Files\Intel\Wireless\Bin\LIBEAY32.dll] [N/A, ] [C:\Program Files\Intel\Wireless\Bin\IntStngs.dll] [, 10, 1, 0, 3] [C:\Program Files\Intel\Wireless\Bin\IWMSPROV.DLL] [N/A, ] [C:\WINDOWS\system32\88DFCFFB.DLL] [Microsoft Corporation, ] [PID: 1484 / SYSTEM][C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe] [Intel(R) Corporation, 10, 1, 0, 27] [C:\Program Files\Intel\Wireless\Bin\PfMgrApi.dll] [Intel Corporation, 10, 1, 0, 46] [C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL] [Intel Corporation, 10, 1, 0, 5] [C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll] [Intel Corporation, 10, 1, 0, 2] [C:\Program Files\Intel\Wireless\Bin\DbEngine.dll] [Intel Corporation, 10, 1, 0, 13] [C:\Program Files\Intel\Wireless\Bin\LIBEAY32.dll] [N/A, ] [C:\Program Files\Intel\Wireless\Bin\IntStngs.dll] [, 10, 1, 0, 3] [C:\Program Files\Intel\Wireless\Bin\MurocApi.dll] [Intel Corporation, 10, 1, 0, 37] [C:\Program Files\Intel\Wireless\Bin\S24MUDLL.dll] [Intel Corporation, 10, 1, 0, 1] [C:\WINDOWS\system32\88DFCFFB.DLL] [Microsoft Corporation, ] [PID: 1564 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\88DFCFFB.DLL] [Microsoft Corporation, ] [PID: 1692 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\88DFCFFB.DLL] [Microsoft Corporation, ] [PID: 1892 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)] [C:\WINDOWS\system32\88DFCFFB.DLL] [Microsoft Corporation, ] [PID: 620 / lily][C:\WINDOWS\system32\Ati2evxx.exe] [ATI Technologies Inc., 6.14.10.4129] [C:\WINDOWS\system32\Ati2edxx.dll] [ATI Technologies, Inc., 6, 14, 10, 2500] [C:\WINDOWS\system32\PTSShell.dll] [N/A, ] [C:\WINDOWS\system32\LotusHlp.dll] [N/A, ] [C:\WINDOWS\system32\eltaltyzx.dll] [Microsoft Corporation, 5.1.2600.3099] [C:\WINDOWS\system32\WSockDrv32.dll] [N/A, ] [C:\WINDOWS\system32\ksyhrygwd.dll] [Microsoft Corporation, 5.1.2600.3099] [C:\Program Files\Internet Explorer\PLUGINS\Ns_Sys55.Sys] [N/A, ] [C:\WINDOWS\system32\SHAProc.dat] [N/A, ] [C:\WINDOWS\system32\88DFCFFB.DLL] [Microsoft Corporation, ] [C:\WINDOWS\system32\pedadt.dll] [N/A, ] [PID: 744 / lily][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234)] [C:\DOCUME~1\lily\LOCALS~1\Temp\dat1D.tmp] [, 1, 0, 0, 1] [C:\WINDOWS\system32\msosiocp.dll] [N/A, ] [C:\WINDOWS\system32\WPDShServiceObj.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)] [C:\WINDOWS\system32\PortableDeviceTypes.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)] [C:\WINDOWS\system32\PortableDeviceApi.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\upxdnd.dll] [N/A, ] [C:\WINDOWS\system32\ksyhrygwd.dll] [Microsoft Corporation, 5.1.2600.3099] [C:\WINDOWS\system32\ijougiemnaw.dll] [N/A, ] [C:\WINDOWS\system32\eohsom.dll] [N/A, ] [C:\WINDOWS\system32\gnolnait.dll] [N/A, ] [C:\WINDOWS\system32\aapaenun.dll] [N/A, ] [C:\WINDOWS\system32\hjiq.dll] [N/A, ] [C:\WINDOWS\system32\msccrt.dll] [N/A, ] [C:\WINDOWS\system32\cmdbcs.dll] [N/A, ] [C:\WINDOWS\system32\WSockDrv32.dll] [N/A, ] [C:\WINDOWS\system32\cuhad.dll] [N/A, ] [C:\WINDOWS\system32\DbgHlp32.dlL] [N/A, ] [C:\WINDOWS\system32\eltaltyzx.dll] [Microsoft Corporation, 5.1.2600.3099] [C:\DOCUME~1\lily\LOCALS~1\Temp\dat36.tmp] [, 1, 0, 0, 1] [C:\WINDOWS\system32\tsqc.dll] [N/A, ] [C:\WINDOWS\system32\LotusHlp.dll] [N/A, ] [C:\WINDOWS\system32\PTSShell.dll] [N/A, ] [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll] [Adobe Systems, Inc., 7.0.0.0] [C:\WINDOWS\system32\taijoad.dll] [N/A, ] [C:\Program Files\Internet Explorer\PLUGINS\Ns_Sys55.Sys] [N/A, ] [C:\WINDOWS\system32\pahzij.dll] [N/A, ] [C:\WINDOWS\system32\mnauygniqaixnaij.dll] [N/A, ] [C:\WINDOWS\system32\sve.dll] [N/A, ] [C:\WINDOWS\system32\duygnef.dll] [N/A, ] [C:\WINDOWS\system32\SHAProc.dat] [N/A, ] [C:\WINDOWS\system32\bchib.dll] [N/A, ] [C:\WINDOWS\system32\slcs.dll] [N/A, ] [C:\WINDOWS\system32\bauhgnem.dll] [N/A, ] [C:\WINDOWS\system32\fifeei.dll] [N/A, ] [C:\WINDOWS\system32\88DFCFFB.DLL] [Microsoft Corporation, ] [C:\WINDOWS\system32\pedadt.dll] [N/A, ] [C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll] [Thunder Networking Technologies,LTD, 1.0.5.16] [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 7.0.7.2006011200] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\system32\dla\tfswshx.dll] [Sonic Solutions, 1.04.08a] [C:\WINDOWS\system32\tfswapi.dll] [Sonic Solutions, 1.04.08a] [C:\WINDOWS\system32\dla\tfswcres.dll] [Sonic Solutions, 1.04.08a] [C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 8, 55] [C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DsBho_01.dll] [, 1, 0, 0, 12] [C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DataProcessor_01.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 13] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.17] [PID: 1324 / SYSTEM][C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe] [Intel Corporation, 10, 1, 0, 1] [C:\WINDOWS\system32\88DFCFFB.DLL] [Microsoft Corporation, ] [PID: 1516 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\88DFCFFB.DLL] [Microsoft Corporation, ] [PID: 1004 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\88DFCFFB.DLL] [Microsoft Corporation, ] [PID: 1396 / lily][C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe] [Intel Corporation, 10, 1, 0, 42] [C:\Program Files\Intel\Wireless\bin\PfMgrApi.dll] [Intel Corporation, 10, 1, 0, 46] [C:\Program Files\Intel\Wireless\bin\TraceAPI.DLL] [Intel Corporation, 10, 1, 0, 5] [C:\Program Files\Intel\Wireless\bin\PsRegApi.dll] [Intel Corporation, 10, 1, 0, 2] [C:\Program Files\Intel\Wireless\bin\DbEngine.dll] [Intel Corporation, 10, 1, 0, 13] [C:\Program Files\Intel\Wireless\bin\LIBEAY32.dll] [N/A, ] [C:\Program Files\Intel\Wireless\bin\IntStngs.dll] [, 10, 1, 0, 3] [C:\Program Files\Intel\Wireless\bin\MurocApi.dll] [Intel Corporation, 10, 1, 0, 37] [C:\Program Files\Intel\Wireless\bin\S24MUDLL.dll] [Intel Corporation, 10, 1, 0, 1] [C:\Program Files\Intel\Wireless\Bin\ZcSvcCHS.dll] [Intel Corporation, 10, 1, 0, 42] [C:\WINDOWS\system32\ksyhrygwd.dll] [Microsoft Corporation, 5.1.2600.3099] [C:\WINDOWS\system32\ijougiemnaw.dll] [N/A, ] [C:\WINDOWS\system32\gnolnait.dll] [N/A, ] [C:\WINDOWS\system32\eohsom.dll] [N/A, ] [C:\WINDOWS\system32\WSockDrv32.dll] [N/A, ] [C:\WINDOWS\system32\PTSShell.dll] [N/A, ] [C:\WINDOWS\system32\LotusHlp.dll] [N/A, ] [C:\WINDOWS\system32\eltaltyzx.dll] [Microsoft Corporation, 5.1.2600.3099] [C:\Program Files\Internet Explorer\PLUGINS\Ns_Sys55.Sys] [N/A, ] [C:\WINDOWS\system32\SHAProc.dat] [N/A, ] [C:\WINDOWS\system32\88DFCFFB.DLL] [Microsoft Corporation, ] [C:\WINDOWS\system32\pedadt.dll] [N/A, ] [PID: 1420 / SYSTEM][C:\WINDOWS\system32\wbem\wmiprvse.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\88DFCFFB.DLL] [Microsoft Corporation, ] [PID: 1472 / lily][C:\Program Files\ATI Technologies\ATI.ACE\cli.exe] [ATI Technologies Inc., 1.11.0.0] [C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.253 (QFE.050727-2500)] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_85900750\mscorlib.dll] [N/A, ] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSCORJIT.DLL] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly\gac\system.windows.forms\1.0.5000.0__b77a5c561934e089\system.windows.forms.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly\nativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_b9b33dd1\system.windows.forms.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.implementation.dll] [ATI Technologies Inc., 1.2.2250.38863] [c:\program files\ati technologies\ati.ace\log.foundation.dll] [ATI Technologies Inc., 1.2.2208.29985] [c:\program files\ati technologies\ati.ace\cli.foundation.dll] [ATI Technologies Inc., 1.2.2208.29986] [c:\program files\ati technologies\ati.ace\log.foundation.service.dll] [ATI Technologies Inc., 1.2.2250.39005] [c:\program files\ati technologies\ati.ace\log.foundation.shared.dll] [ATI Technologies Inc., 1.2.2208.29991] [c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly\nativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_0c614792\system.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.foundation.xmanifestation.dll] [ATI Technologies Inc., 1.2.2250.39005] [c:\windows\assembly\gac\system.xml\1.0.5000.0__b77a5c561934e089\system.xml.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly\nativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_ab3ae596\system.xml.dll] [N/A, ] [c:\windows\assembly\gac\system.runtime.remoting\1.0.5000.0__b77a5c561934e089\system.runtime.remoting.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\program files\ati technologies\ati.ace\cli.component.runtime.dll] [ATI Technologies Inc., 1.2.2250.39006] [c:\program files\ati technologies\ati.ace\aticccom.dll] [ATI Technologies Inc., 1.0.0.0] [c:\program files\ati technologies\ati.ace\aem.foundation.dll] [ATI Technologies Inc., 1.2.2208.29985] [c:\windows\assembly\gac\system.drawing\1.0.5000.0__b03f5f7f11d50a3a\system.drawing.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly\nativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_802afd06\system.drawing.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29987] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2250.39000] [c:\program files\ati technologies\ati.ace\cli.component.runtime.shared.dll] [ATI Technologies Inc., 1.2.2208.29988] [c:\program files\ati technologies\ati.ace\dem.foundation.dll] [ATI Technologies Inc., 1.11.0.0] [c:\program files\ati technologies\ati.ace\dem.graphics.i0601.dll] [ATI Technologies Inc., 1.11.0.0] [c:\program files\ati technologies\ati.ace\ace.graphics.displaysmanager.shared.dll] [ATI Technologies Inc., 1.11.0.0] [c:\windows\assembly\gac\system.web\1.0.5000.0__b03f5f7f11d50a3a\system.web.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\program files\ati technologies\ati.ace\atidemgr.dll] [ATI Technologies Inc., 1.2.2250.38848] [c:\windows\assembly\gac\system.management\1.0.5000.0__b03f5f7f11d50a3a\system.management.dll] [Microsoft Corporation, 1.1.4322.2032] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\WMINet_Utils.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2250.38896] [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29991] [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2250.38916] [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.30001] [c:\program files\ati technologies\ati.ace\cli.aspect.verylargedesktop.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2250.38896] [c:\program files\ati technologies\ati.ace\cli.aspect.verylargedesktop.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29993] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2250.38932] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3dlegacy.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2250.38929] [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2250.38900] [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.30007] [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2250.38960] [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29990] [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2250.38946] [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.30001] [c:\program files\ati technologies\ati.ace\cli.aspect.videooverlay.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2250.39005] [c:\program files\ati technologies\ati.ace\cli.aspect.videooverlay.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29989] [c:\program files\ati technologies\ati.ace\ace.graphics.videooverlay.shared.dll] [ATI Technologies Inc., 1.11.0.0] [c:\program files\ati technologies\ati.ace\cli.aspect.smartgart.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2250.38926] [c:\program files\ati technologies\ati.ace\cli.aspect.vpurecover.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2250.38920] [c:\program files\ati technologies\ati.ace\cli.aspect.vpurecover.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29988] [c:\program files\ati technologies\ati.ace\cli.aspect.workstationconfig.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2250.38918] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2250.38979] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29991] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2250.38905] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29995] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2250.38970] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29994] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2250.38900] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29993] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2250.38976] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29993] [c:\program files\ati technologies\ati.ace\cli.aspect.customformats.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29987] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2250.38908] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2237.19430] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2250.38967] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2250.38963] [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2250.38973] [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29994] [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2250.38903] [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29994] [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive3.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2250.38938] [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive3.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29993] [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2250.38943] [c:\program files\ati technologies\ati.ace\cli.aspect.powerplay3.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2250.38935] [c:\program files\ati technologies\ati.ace\cli.aspect.powerplay3.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29989] [c:\program files\ati technologies\ati.ace\cli.aspect.displaysoptions.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2250.38955] [c:\program files\ati technologies\ati.ace\cli.aspect.integratedumaframebuffer.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2250.38950] [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2250.38952] [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29990] [c:\program files\ati technologies\ati.ace\cli.aspect.hotkeyshandling.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2250.38911] [c:\program files\ati technologies\ati.ace\cli.aspect.hotkeyshandling.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.30002] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29990] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3dlegacy.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.30001] [c:\program files\ati technologies\ati.ace\dem.graphics.i0600.dll] [ATI Technologies Inc., 1.11.0.0] [c:\program files\ati technologies\ati.ace\cli.aspect.smartgart.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29990] [c:\program files\ati technologies\ati.ace\cli.aspect.workstationconfig.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29988] [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29987] [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29986] [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2250.38860] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.30001] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29993] [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29989] [c:\program files\ati technologies\ati.ace\cli.aspect.displaysoptions.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29993] [c:\program files\ati technologies\ati.ace\cli.aspect.integratedumaframebuffer.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29988] [c:\program files\ati technologies\ati.ace\apm.foundation.dll] [ATI Technologies Inc., 1.2.2208.30002] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.17] [C:\DOCUME~1\lily\LOCALS~1\Temp\dat1D.tmp] [, 1, 0, 0, 1] [C:\WINDOWS\system32\msosiocp.dll] [N/A, ] [C:\WINDOWS\system32\ksyhrygwd.dll] [Microsoft Corporation, 5.1.2600.3099] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\perfcounter.dll] [Microsoft Corporation, 1.1.4322.2032] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\system32\PTSShell.dll] [N/A, ] [C:\WINDOWS\system32\LotusHlp.dll] [N/A, ] [C:\WINDOWS\system32\eltaltyzx.dll] [Microsoft Corporation, 5.1.2600.3099] [C:\WINDOWS\system32\WSockDrv32.dll] [N/A, ] [C:\Program Files\Internet Explorer\PLUGINS\Ns_Sys55.Sys] [N/A, ] [C:\WINDOWS\system32\SHAProc.dat] [N/A, ] [C:\WINDOWS\system32\88DFCFFB.DLL] [Microsoft Corporation, ] [C:\WINDOWS\system32\pedadt.dll] [N/A, ] [PID: 1668 / lily][C:\Program Files\Synaptics\SynTP\SynTPEnh.exe] [Synaptics, Inc., 8.2.4.3 29Nov05] [C:\WINDOWS\system32\SynCOM.dll] [Synaptics, Inc., 8.2.4.3 29Nov05] [C:\WINDOWS\system32\SynTPAPI.dll] [Synaptics, Inc., 8.2.4.3 29Nov05] [C:\WINDOWS\system32\PTSShell.dll] [N/A, ] [C:\WINDOWS\system32\LotusHlp.dll] [N/A, ] [C:\WINDOWS\system32\eltaltyzx.dll] [Microsoft Corporation, 5.1.2600.3099] [C:\WINDOWS\system32\WSockDrv32.dll] [N/A, ] [C:\WINDOWS\system32\ksyhrygwd.dll] [Microsoft Corporation, 5.1.2600.3099] [C:\Program Files\Internet Explorer\PLUGINS\Ns_Sys55.Sys] [N/A, ] [C:\WINDOWS\system32\SHAProc.dat] [N/A, ] [C:\WINDOWS\system32\88DFCFFB.DLL] [Microsoft Corporation, ] [C:\WINDOWS\system32\pedadt.dll] [N/A, ] [PID: 1716 / lily][C:\WINDOWS\stsystra.exe] [SigmaTel, Inc., 1.0.4823.0 nd322 cp1] [C:\WINDOWS\system32\stacapi.dll] [SigmaTel, Inc., 1.0.4823.0 nd322 cp1] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\ksyhrygwd.dll] [Microsoft Corporation, 5.1.2600.3099] [C:\WINDOWS\system32\WSockDrv32.dll] [N/A, ] [C:\WINDOWS\system32\eltaltyzx.dll] [Microsoft Corporation, 5.1.2600.3099] [C:\WINDOWS\system32\LotusHlp.dll] [N/A, ] [C:\WINDOWS\system32\PTSShell.dll] [N/A, ] [C:\Program Files\Internet Explorer\PLUGINS\Ns_Sys55.Sys] [N/A, ] [C:\WINDOWS\system32\SHAProc.dat] [N/A, ] [C:\WINDOWS\system32\88DFCFFB.DLL] [Microsoft Corporation, ] [C:\WINDOWS\system32\pedadt.dll] [N/A, ] [PID: 2140 / lily][C:\Program Files\Rising\Rav\RavTask.exe] [Beijing Rising Technology Co., Ltd., 20.0.0.22] [C:\Program Files\Rising\Rav\ProcCom.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19] [C:\Program Files\Rising\Rav\RsCommX2.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16] [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 20.0.0.0] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.10] [C:\WINDOWS\system32\ksyhrygwd.dll] [Microsoft Corporation, 5.1.2600.3099] [C:\WINDOWS\system32\WSockDrv32.dll] [N/A, ] [C:\WINDOWS\system32\eltaltyzx.dll] [Microsoft Corporation, 5.1.2600.3099] [C:\WINDOWS\system32\LotusHlp.dll] [N/A, ] [C:\WINDOWS\system32\PTSShell.dll] [N/A, ] [C:\Program Files\Internet Explorer\PLUGINS\Ns_Sys55.Sys] [N/A, ] [C:\WINDOWS\system32\SHAProc.dat] [N/A, ] [C:\WINDOWS\system32\88DFCFFB.DLL] [Microsoft Corporation, ] [C:\WINDOWS\system32\pedadt.dll] [N/A, ] [PID: 2176 / lily][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\ksyhrygwd.dll] [Microsoft Corporation, 5.1.2600.3099] [C:\WINDOWS\system32\WSockDrv32.dll] [N/A, ] [C:\WINDOWS\system32\eltaltyzx.dll] [Microsoft Corporation, 5.1.2600.3099] [C:\WINDOWS\system32\LotusHlp.dll] [N/A, ] [C:\WINDOWS\system32\PTSShell.dll] [N/A, ] [C:\Program Files\Internet Explorer\PLUGINS\Ns_Sys55.Sys] [N/A, ] [C:\WINDOWS\system32\SHAProc.dat] [N/A, ] [C:\WINDOWS\system32\88DFCFFB.DLL] [Microsoft Corporation, ] [C:\WINDOWS\system32\pedadt.dll] [N/A, ] [PID: 2412 / lily][C:\Program Files\Rising\Rav\Ravmon.exe] [Beijing Rising Technology Co., Ltd., 20.0.01.13] [C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Rising\Rav\ProcCom.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19] [C:\Program Files\Rising\Rav\RsCommX2.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16] [C:\Program Files\Rising\Rav\recomp.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 31] [C:\Program Files\Rising\Rav\refs.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 15] [C:\Program Files\Rising\Rav\viruslib.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 21] [C:\Program Files\Rising\Rav\relibldr.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 13] [C:\Program Files\Rising\Rav\RSAPPMGR.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.0] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.10] [C:\Program Files\Rising\Rav\MonRule.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.28] [C:\Program Files\Rising\Rav\PngDll.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 4] [C:\Program Files\Rising\Rav\Rsguilib.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 88] [C:\Program Files\Rising\Rav\RsXML.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 0] [C:\WINDOWS\system32\ksyhrygwd.dll] [Microsoft Corporation, 5.1.2600.3099] [C:\WINDOWS\system32\WSockDrv32.dll] [N/A, ] [C:\WINDOWS\system32\eltaltyzx.dll] [Microsoft Corporation, 5.1.2600.3099] [C:\WINDOWS\system32\LotusHlp.dll] [N/A, ] [C:\WINDOWS\system32\PTSShell.dll] [N/A, ] [C:\Program Files\Internet Explorer\PLUGINS\Ns_Sys55.Sys] [N/A, ] [C:\WINDOWS\system32\SHAProc.dat] [N/A, ] [C:\WINDOWS\system32\88DFCFFB.DLL] [Microsoft Corporation, ] [C:\WINDOWS\system32\pedadt.dll] [N/A, ] [PID: 3148 / lily][C:\Program Files\ATI Technologies\ATI.ACE\cli.exe] [ATI Technologies Inc., 1.11.0.0] [C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.253 (QFE.050727-2500)] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_85900750\mscorlib.dll] [N/A, ] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\system32\ksyhrygwd.dll] [Microsoft Corporation, 5.1.2600.3099] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSCORJIT.DLL] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly\gac\system.windows.forms\1.0.5000.0__b77a5c561934e089\system.windows.forms.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly\nativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_b9b33dd1\system.windows.forms.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.implementation.dll] [ATI Technologies Inc., 1.2.2250.38863] [c:\program files\ati technologies\ati.ace\log.foundation.dll] [ATI Technologies Inc., 1.2.2208.29985] [c:\program files\ati technologies\ati.ace\cli.foundation.dll] [ATI Technologies Inc., 1.2.2208.29986] [c:\program files\ati technologies\ati.ace\log.foundation.service.dll] [ATI Technologies Inc., 1.2.2250.39005] [c:\program files\ati technologies\ati.ace\log.foundation.shared.dll] [ATI Technologies Inc., 1.2.2208.29991] [c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly\nativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_0c614792\system.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.foundation.xmanifestation.dll] [ATI Technologies Inc., 1.2.2250.39005] [c:\windows\assembly\gac\system.xml\1.0.5000.0__b77a5c561934e089\system.xml.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly\nativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_ab3ae596\system.xml.dll] [N/A, ] [c:\windows\assembly\gac\system.runtime.remoting\1.0.5000.0__b77a5c561934e089\system.runtime.remoting.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\program files\ati technologies\ati.ace\cli.component.dashboard.dll] [ATI Technologies Inc., 1.2.2250.39008] [c:\program files\ati technologies\ati.ace\cli.foundation.clients.dll] [ATI Technologies Inc., 1.2.2208.29986] [c:\program files\ati technologies\ati.ace\cli.component.dashboard.shared.dll] [ATI Technologies Inc., 1.2.2208.29987] [c:\program files\ati technologies\ati.ace\cli.component.runtime.dll] [ATI Technologies Inc., 1.2.2250.39006] [c:\program files\ati technologies\ati.ace\aticccom.dll] [ATI Technologies Inc., 1.0.0.0] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29987] [c:\program files\ati technologies\ati.ace\aem.foundation.dll] [ATI Technologies Inc., 1.2.2208.29985] [c:\program files\ati technologies\ati.ace\ace.graphics.displaysmanager.shared.dll] [ATI Technologies Inc., 1.11.0.0] [c:\program files\ati technologies\ati.ace\cli.caste.local.dashboard.dll] [ATI Technologies Inc., 1.2.2250.39010] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.dashboard.dll] [ATI Technologies Inc., 1.2.2250.39003] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.dashboard.shared.dll] [ATI Technologies Inc., 1.2.2208.29990] [c:\windows\assembly\gac\system.drawing\1.0.5000.0__b03f5f7f11d50a3a\system.drawing.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly\nativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_802afd06\system.drawing.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.aspect.welcome.local.dashboard.dll] [ATI Technologies Inc., 1.2.2250.38916] [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.dashboard.dll] [ATI Technologies Inc., 1.2.2250.38953] [c:\program files\ati technologies\ati.ace\cli.aspect.displaysmanager.graphics.dashboard.dll] [ATI Technologies Inc., 1.2.2250.38958] [c:\program files\ati technologies\ati.ace\cli.aspect.verylargedesktop.graphics.dashboard.dll] [ATI Technologies Inc., 1.2.2250.38894] [c:\program files\ati technologies\ati.ace\cli.aspect.displaysoptions.graphics.dashboard.dll] [ATI Technologies Inc., 1.2.2250.38955] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt.graphics.dashboard.dll] [ATI Technologies Inc., 1.2.2250.38980] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt2.graphics.dashboard.dll] [ATI Technologies Inc., 1.2.2250.38906] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.dashboard.dll] [ATI Technologies Inc., 1.2.2250.38971] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.dashboard.dll] [ATI Technologies Inc., 1.2.2250.38900] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.dashboard.dll] [ATI Technologies Inc., 1.2.2250.38977] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.dashboard.dll] [ATI Technologies Inc., 1.2.2250.38909] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.dashboard.dll] [ATI Technologies Inc., 1.2.2250.38968] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.dashboard.dll] [ATI Technologies Inc., 1.2.2250.38964] [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp.graphics.dashboard.dll] [ATI Technologies Inc., 1.2.2250.38973] [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp2.graphics.dashboard.dll] [ATI Technologies Inc., 1.2.2250.38903] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.dashboard.dll] [ATI Technologies Inc., 1.2.2250.38933] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3dlegacy.graphics.dashboard.dll] [ATI Technologies Inc., 1.2.2250.38930] [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour2.graphics.dashboard.dll] [ATI Technologies Inc., 1.2.2250.38898] [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour.graphics.dashboard.dll] [ATI Technologies Inc., 1.2.2250.38961] [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.dashboard.dll] [ATI Technologies Inc., 1.2.2250.38947] [c:\program files\ati technologies\ati.ace\cli.aspect.videooverlay.graphics.dashboard.dll] [ATI Technologies Inc., 1.2.2250.38924] [c:\program files\ati technologies\ati.ace\cli.aspect.powerplay3.graphics.dashboard.dll] [ATI Technologies Inc., 1.2.2250.38935] [c:\program files\ati technologies\ati.ace\cli.aspect.smartgart.graphics.dashboard.dll] [ATI Technologies Inc., 1.2.2250.38927] [c:\program files\ati technologies\ati.ace\cli.aspect.vpurecover.graphics.dashboard.dll] [ATI Technologies Inc., 1.2.2250.38920] [c:\program files\ati technologies\ati.ace\cli.aspect.workstationconfig.graphics.dashboard.dll] [ATI Technologies Inc., 1.2.2250.38918] [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive3.graphics.dashboard.dll] [ATI Technologies Inc., 1.2.2250.38941] [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive2.graphics.dashboard.dll] [ATI Technologies Inc., 1.2.2250.38944] [c:\program files\ati technologies\ati.ace\cli.aspect.integratedumaframebuffer.graphics.dashboard.dll] [ATI Technologies Inc., 1.2.2250.38950] [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu2.graphics.dashboard.dll] [ATI Technologies Inc., 1.2.2250.38860] [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu.graphics.dashboard.dll] [ATI Technologies Inc., 1.2.2250.38911] [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29990] [c:\program files\ati technologies\ati.ace\cli.aspect.hotkeyshandling.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.30002] [c:\program files\ati technologies\ati.ace\cli.aspect.verylargedesktop.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29993] [c:\program files\ati technologies\ati.ace\cli.aspect.displaysoptions.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29993] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29991] [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29987] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29995] [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29986] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29994] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29993] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29993] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2237.19430] [c:\program files\ati technologies\ati.ace\cli.aspect.customformats.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29987] [C:\WINDOWS\system32\eohsom.dll] [N/A, ] [C:\WINDOWS\system32\ijougiemnaw.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.30001] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29993] [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29994] [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29994] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29990] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3dlegacy.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.30001] [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.30007] [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29990] [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.30001] [c:\program files\ati technologies\ati.ace\cli.aspect.videooverlay.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29989] [c:\program files\ati technologies\ati.ace\cli.aspect.powerplay3.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29989] [c:\program files\ati technologies\ati.ace\cli.aspect.smartgart.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29990] [c:\program files\ati technologies\ati.ace\cli.aspect.vpurecover.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29988] [c:\program files\ati technologies\ati.ace\cli.aspect.workstationconfig.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29988] [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive3.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29993] [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29989] [c:\program files\ati technologies\ati.ace\cli.aspect.integratedumaframebuffer.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29988] [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.29991] [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu.graphics.shared.dll] [ATI Technologies Inc., 1.2.2208.30001] [c:\windows\assembly\gac\system.web\1.0.5000.0__b03f5f7f11d50a3a\system.web.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\perfcounter.dll] [Microsoft Corporation, 1.1.4322.2032] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\system32\PTSShell.dll] [N/A, ] [C:\WINDOWS\system32\LotusHlp.dll] [N/A, ] [C:\WINDOWS\system32\eltaltyzx.dll] [Microsoft Corporation, 5.1.2600.3099] [C:\WINDOWS\system32\WSockDrv32.dll] [N/A, ] [C:\Program Files\Internet Explorer\PLUGINS\Ns_Sys55.Sys] [N/A, ] [C:\WINDOWS\system32\SHAProc.dat] [N/A, ] [C:\WINDOWS\system32\88DFCFFB.DLL] [Microsoft Corporation, ] [C:\WINDOWS\system32\pedadt.dll] [N/A, ] [PID: 3612 / lily][C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe] [Intel Corporation, 10, 1, 0, 79] [C:\PROGRA~1\Intel\Wireless\Bin\acAuth.dll] [, 4.0.15.0 2005-11-16 13:05:02] [C:\PROGRA~1\Intel\Wireless\Bin\C1XStngs.dll] [Intel Corporation, 10, 1, 0, 31] [C:\PROGRA~1\Intel\Wireless\Bin\PsRegApi.dll] [Intel Corporation, 10, 1, 0, 2] [C:\PROGRA~1\Intel\Wireless\Bin\IntStngs.dll] [, 10, 1, 0, 3] [C:\PROGRA~1\Intel\Wireless\Bin\TraceAPI.DLL] [Intel Corporation, 10, 1, 0, 5] [C:\PROGRA~1\Intel\Wireless\Bin\IWMSPROV.DLL] [N/A, ] [C:\WINDOWS\system32\eohsom.dll] [N/A, ] [C:\WINDOWS\system32\ijougiemnaw.dll] [N/A, ] [C:\Program Files\Intel\Wireless\Bin\C8021CHS.dll] [Intel Corporation, 10, 1, 0, 31] [C:\WINDOWS\system32\ksyhrygwd.dll] [Microsoft Corporation, 5.1.2600.3099] [C:\PROGRA~1\Intel\Wireless\Bin\LSAWRAPI.dll] [Intel Corporation, 10, 1, 0, 1] [C:\PROGRA~1\Intel\Wireless\Bin\PfMgrApi.dll] [Intel Corporation, 10, 1, 0, 46] [C:\PROGRA~1\Intel\Wireless\Bin\DbEngine.dll] [Intel Corporation, 10, 1, 0, 13] [C:\PROGRA~1\Intel\Wireless\Bin\LIBEAY32.dll] [N/A, ] [C:\WINDOWS\system32\PTSShell.dll] [N/A, ] [C:\WINDOWS\system32\LotusHlp.dll] [N/A, ] [C:\WINDOWS\system32\eltaltyzx.dll] [Microsoft Corporation, 5.1.2600.3099] [C:\WINDOWS\system32\WSockDrv32.dll] [N/A, ] [C:\Program Files\Internet Explorer\PLUGINS\Ns_Sys55.Sys] [N/A, ] [C:\WINDOWS\system32\SHAProc.dat] [N/A, ] [C:\WINDOWS\system32\88DFCFFB.DLL] [Microsoft Corporation, ] [C:\WINDOWS\system32\pedadt.dll] [N/A, ] [PID: 2916 / lily][C:\Program Files\Rising\Rav\Rav.exe] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 65] [C:\WINDOWS\system32\hjiq.dll] [N/A, ] [C:\WINDOWS\system32\cuhad.dll] [N/A, ] [C:\WINDOWS\system32\gnolnait.dll] [N/A, ] [C:\WINDOWS\system32\eohsom.dll] [N/A, ] [C:\WINDOWS\system32\ijougiemnaw.dll] [N/A, ] [C:\WINDOWS\system32\taijoad.dll] [N/A, ] [C:\WINDOWS\system32\tsqc.dll] [N/A, ] [C:\WINDOWS\system32\eltaltyzx.dll] [Microsoft Corporation, 5.1.2600.3099] [C:\WINDOWS\system32\ksyhrygwd.dll] [Microsoft Corporation, 5.1.2600.3099] [C:\Program Files\Rising\Rav\ProcCom.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19] [C:\Program Files\Rising\Rav\RsCommX2.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19] [C:\Program Files\Rising\Rav\Rsguilib.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 88] [C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Rising\Rav\RsXML.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 0] [C:\Program Files\Rising\Rav\PngDll.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 4] [C:\Program Files\Rising\Rav\RsCommon.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16] [C:\WINDOWS\system32\PTSShell.dll] [N/A, ] [C:\WINDOWS\system32\LotusHlp.dll] [N/A, ] [C:\WINDOWS\system32\WSockDrv32.dll] [N/A, ] [C:\Program Files\Rising\Rav\ravpagem.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 94] [C:\Program Files\Rising\Rav\htmllib.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.15] [C:\WINDOWS\system32\DbgHlp32.dlL] [N/A, ] [C:\WINDOWS\system32\cmdbcs.dll] [N/A, ] [C:\WINDOWS\system32\msccrt.dll] [N/A, ] [C:\WINDOWS\system32\aapaenun.dll] [N/A, ] [C:\WINDOWS\system32\upxdnd.dll] [N/A, ] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.17] [C:\DOCUME~1\lily\LOCALS~1\Temp\dat36.tmp] [, 1, 0, 0, 1] [C:\WINDOWS\system32\msosiocp.dll] [N/A, ] [C:\WINDOWS\system32\pahzij.dll] [N/A, ] [C:\Program Files\Internet Explorer\PLUGINS\Ns_Sys55.Sys] [N/A, ] [C:\WINDOWS\system32\mnauygniqaixnaij.dll] [N/A, ] [C:\Program Files\Rising\Rav\ravpagew.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 86] [C:\WINDOWS\system32\sve.dll] [N/A, ] [C:\Program Files\Rising\Rav\RSAPPMGR.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.0] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.10] [C:\WINDOWS\system32\duygnef.dll] [N/A, ] [C:\Program Files\Rising\Rav\fakescan.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.13] [C:\Program Files\Rising\Rav\Scanner.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.36] [C:\Program Files\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.4] [C:\Program Files\Rising\Rav\SysMail.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.10] [C:\WINDOWS\system32\bchib.dll] [N/A, ] [C:\WINDOWS\system32\SHAProc.dat] [N/A, ] [C:\WINDOWS\system32\pedadt.dll] [N/A, ] [C:\WINDOWS\system32\slcs.dll] [N/A, ] [C:\WINDOWS\system32\fifeei.dll] [N/A, ] [C:\WINDOWS\system32\bauhgnem.dll] [N/A, ] [C:\WINDOWS\system32\88DFCFFB.DLL] [Microsoft Corporation, ] [PID: 4012 / lily][C:\WINDOWS\system32\conime.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\hjiq.dll] [N/A, ] [C:\WINDOWS\system32\cuhad.dll] [N/A, ] [C:\WINDOWS\system32\mnauygniqaixnaij.dll] [N/A, ] [C:\WINDOWS\system32\gnolnait.dll] [N/A, ] [C:\WINDOWS\system32\eohsom.dll] [N/A, ] [C:\WINDOWS\system32\ijougiemnaw.dll] [N/A, ] [C:\WINDOWS\system32\taijoad.dll] [N/A, ] [C:\WINDOWS\system32\tsqc.dll] [N/A, ] [C:\WINDOWS\system32\pahzij.dll] [N/A, ] [PID: 5252 / SYSTEM][C:\WINDOWS\system32\wuauclt.exe] [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)] [C:\WINDOWS\system32\hjiq.dll] [N/A, ] [C:\WINDOWS\system32\cuhad.dll] [N/A, ] [C:\WINDOWS\system32\mnauygniqaixnaij.dll] [N/A, ] [C:\WINDOWS\system32\sve.dll] [N/A, ] [C:\WINDOWS\system32\gnolnait.dll] [N/A, ] [C:\WINDOWS\system32\duygnef.dll] [N/A, ] [C:\WINDOWS\system32\bchib.dll] [N/A, ] [C:\WINDOWS\system32\bauhgnem.dll] [N/A, ] [C:\WINDOWS\system32\eohsom.dll] [N/A, ] [C:\WINDOWS\system32\ijougiemnaw.dll] [N/A, ] [C:\WINDOWS\system32\taijoad.dll] [N/A, ] [C:\WINDOWS\system32\tsqc.dll] [N/A, ] [C:\WINDOWS\system32\pahzij.dll] [N/A, ] [C:\WINDOWS\system32\slcs.dll] [N/A, ] [C:\WINDOWS\system32\wups2.dll] [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)] [C:\WINDOWS\system32\88DFCFFB.DLL] [Microsoft Corporation, ] [PID: 3220 / lily][C:\WINDOWS\system32\conime.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\hjiq.dll] [N/A, ] [C:\WINDOWS\system32\cuhad.dll] [N/A, ] [C:\WINDOWS\system32\mnauygniqaixnaij.dll] [N/A, ] [C:\WINDOWS\system32\sve.dll] [N/A, ] [C:\WINDOWS\system32\gnolnait.dll] [N/A, ] [C:\WINDOWS\system32\duygnef.dll] [N/A, ] [C:\WINDOWS\system32\bchib.dll] [N/A, ] [C:\WINDOWS\system32\bauhgnem.dll] [N/A, ] [C:\WINDOWS\system32\eohsom.dll] [N/A, ] [C:\WINDOWS\system32\ijougiemnaw.dll] [N/A, ] [C:\WINDOWS\system32\taijoad.dll] [N/A, ] [C:\WINDOWS\system32\tsqc.dll] [N/A, ] [C:\WINDOWS\system32\pahzij.dll] [N/A, ] [C:\WINDOWS\system32\slcs.dll] [N/A, ] [C:\WINDOWS\system32\fifeei.dll] [N/A, ] [C:\Program Files\Internet Explorer\PLUGINS\Ns_Sys55.Sys] [N/A, ] [C:\WINDOWS\system32\eltaltyzx.dll] [Microsoft Corporation, 5.1.2600.3099] [C:\WINDOWS\system32\ksyhrygwd.dll] [Microsoft Corporation, 5.1.2600.3099] [C:\WINDOWS\system32\SHAProc.dat] [N/A, ] [C:\WINDOWS\system32\PTSShell.dll] [N/A, ] [C:\WINDOWS\system32\LotusHlp.dll] [N/A, ] [C:\WINDOWS\system32\WSockDrv32.dll] [N/A, ] [C:\WINDOWS\system32\pedadt.dll] [N/A, ] [PID: 4040 / lily][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\hjiq.dll] [N/A, ] [C:\WINDOWS\system32\cuhad.dll] [N/A, ] [C:\WINDOWS\system32\mnauygniqaixnaij.dll] [N/A, ] [C:\WINDOWS\system32\sve.dll] [N/A, ] [C:\WINDOWS\system32\gnolnait.dll] [N/A, ] [C:\WINDOWS\system32\duygnef.dll] [N/A, ] [C:\WINDOWS\system32\bchib.dll] [N/A, ] [C:\WINDOWS\system32\bauhgnem.dll] [N/A, ] [C:\WINDOWS\system32\eohsom.dll] [N/A, ] [C:\WINDOWS\system32\ijougiemnaw.dll] [N/A, ] [C:\WINDOWS\system32\taijoad.dll] [N/A, ] [C:\WINDOWS\system32\tsqc.dll] [N/A, ] [C:\WINDOWS\system32\pahzij.dll] [N/A, ] [C:\WINDOWS\system32\slcs.dll] [N/A, ] [C:\WINDOWS\system32\fifeei.dll] [N/A, ] [C:\Program Files\Internet Explorer\PLUGINS\Ns_Sys55.Sys] [N/A, ] [C:\WINDOWS\system32\eltaltyzx.dll] [Microsoft Corporation, 5.1.2600.3099] [C:\WINDOWS\system32\ksyhrygwd.dll] [Microsoft Corporation, 5.1.2600.3099] [C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll] [Thunder Networking Technologies,LTD, 1.0.5.16] [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 7.0.7.2006011200] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\system32\dla\tfswshx.dll] [Sonic Solutions, 1.04.08a] [C:\WINDOWS\system32\tfswapi.dll] [Sonic Solutions, 1.04.08a] [C:\WINDOWS\system32\dla\tfswcres.dll] [Sonic Solutions, 1.04.08a] [C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 8, 55] [C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DsBho_01.dll] [, 1, 0, 0, 12] [C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DataProcessor_01.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 13] [C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll] [Microsoft Corporation, 4.200.520.1] [C:\Program Files\Common Files\Microsoft Shared\Windows Live\msidcrl40.dll] [Microsoft Corporation, 4.200.520.1] [C:\Program Files\Windows Live Toolbar\msntb.dll] [Microsoft Corporation, 03.01.0000.0146] [C:\Program Files\Windows Live Toolbar\zh-cn\mtbres.dll.mui] [Microsoft Corporation, 03.00.0001.2012] [C:\Program Files\Windows Live Toolbar\mtbres.dll] [Microsoft Corporation, 03.01.0000.0146] [C:\PROGRA~1\COMMON~1\Wnwb\wnwbio.dll] [深圳世强软件开发部, 2005, 8, 30, 1] [C:\WINDOWS\system32\pedadt.dll] [N/A, ] [C:\WINDOWS\system32\SHAProc.dat] [N/A, ] [C:\WINDOWS\system32\PTSShell.dll] [N/A, ] [C:\WINDOWS\system32\LotusHlp.dll] [N/A, ] [C:\WINDOWS\system32\WSockDrv32.dll] [N/A, ] [C:\WINDOWS\system32\DbgHlp32.dlL] [N/A, ] [C:\WINDOWS\system32\cmdbcs.dll] [N/A, ] [C:\WINDOWS\system32\msccrt.dll] [N/A, ] [C:\WINDOWS\system32\aapaenun.dll] [N/A, ] [C:\WINDOWS\system32\upxdnd.dll] [N/A, ] [C:\WINDOWS\system32\PortableDeviceApi.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 3] [C:\WINDOWS\system32\Macromed\Flash\Flash9e.ocx] [Adobe Systems, Inc., 9,0,115,0] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 4496 / lily][C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe] [Microsoft Corporation, 4.200.520.1] [C:\WINDOWS\system32\hjiq.dll] [N/A, ] [C:\WINDOWS\system32\cuhad.dll] [N/A, ] [C:\WINDOWS\system32\mnauygniqaixnaij.dll] [N/A, ] [C:\WINDOWS\system32\sve.dll] [N/A, ] [C:\WINDOWS\system32\gnolnait.dll] [N/A, ] [C:\WINDOWS\system32\duygnef.dll] [N/A, ] [C:\WINDOWS\system32\bchib.dll] [N/A, ] [C:\WINDOWS\system32\bauhgnem.dll] [N/A, ] [C:\WINDOWS\system32\eohsom.dll] [N/A, ] [C:\WINDOWS\system32\ijougiemnaw.dll] [N/A, ] [C:\WINDOWS\system32\taijoad.dll] [N/A, ] [C:\WINDOWS\system32\tsqc.dll] [N/A, ] [C:\WINDOWS\system32\pahzij.dll] [N/A, ] [C:\WINDOWS\system32\slcs.dll] [N/A, ] [C:\WINDOWS\system32\fifeei.dll] [N/A, ] [C:\Program Files\Internet Explorer\PLUGINS\Ns_Sys55.Sys] [N/A, ] [C:\WINDOWS\system32\eltaltyzx.dll] [Microsoft Corporation, 5.1.2600.3099] [C:\WINDOWS\system32\ksyhrygwd.dll] [Microsoft Corporation, 5.1.2600.3099] [C:\Program Files\Common Files\Microsoft Shared\Windows Live\msidcrl40.dll] [Microsoft Corporation, 4.200.520.1] [C:\WINDOWS\system32\pedadt.dll] [N/A, ] [C:\WINDOWS\system32\SHAProc.dat] [N/A, ] [C:\WINDOWS\system32\PTSShell.dll] [N/A, ] [C:\WINDOWS\system32\LotusHlp.dll] [N/A, ] [C:\WINDOWS\system32\WSockDrv32.dll] [N/A, ] [PID: 6116 / lily][D:\Downloads\System Recovery Engine 2\SREngPS.EXE] [Smallfrogs Studio, 2.5.16.900] [C:\WINDOWS\system32\hjiq.dll] [N/A, ] [C:\WINDOWS\system32\cuhad.dll] [N/A, ] [C:\WINDOWS\system32\mnauygniqaixnaij.dll] [N/A, ] [C:\WINDOWS\system32\sve.dll] [N/A, ] [C:\WINDOWS\system32\gnolnait.dll] [N/A, ] [C:\WINDOWS\system32\duygnef.dll] [N/A, ] [C:\WINDOWS\system32\bchib.dll] [N/A, ] [C:\WINDOWS\system32\bauhgnem.dll] [N/A, ] [C:\WINDOWS\system32\eohsom.dll] [N/A, ] [C:\WINDOWS\system32\ijougiemnaw.dll] [N/A, ] [C:\WINDOWS\system32\taijoad.dll] [N/A, ] [C:\WINDOWS\system32\tsqc.dll] [N/A, ] [C:\WINDOWS\system32\pahzij.dll] [N/A, ] [C:\WINDOWS\system32\slcs.dll] [N/A, ] [C:\WINDOWS\system32\fifeei.dll] [N/A, ] [C:\Program Files\Internet Explorer\PLUGINS\Ns_Sys55.Sys] [N/A, ] [C:\WINDOWS\system32\eltaltyzx.dll] [Microsoft Corporation, 5.1.2600.3099] [C:\WINDOWS\system32\ksyhrygwd.dll] [Microsoft Corporation, 5.1.2600.3099] [C:\WINDOWS\system32\pedadt.dll] [N/A, ] [C:\WINDOWS\system32\SHAProc.dat] [N/A, ] [C:\WINDOWS\system32\PTSShell.dll] [N/A, ] [C:\WINDOWS\system32\LotusHlp.dll] [N/A, ] [C:\WINDOWS\system32\WSockDrv32.dll] [N/A, ] [C:\WINDOWS\system32\DbgHlp32.dlL] [N/A, ] [C:\WINDOWS\system32\cmdbcs.dll] [N/A, ] [C:\WINDOWS\system32\msccrt.dll] [N/A, ] [C:\WINDOWS\system32\aapaenun.dll] [N/A, ] [C:\WINDOWS\system32\upxdnd.dll] [N/A, ] [D:\Downloads\System Recovery Engine 2\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15] ================================== 文件关联 .TXT Error. [C:\WINDOWS\notepad.exe %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM Error. ["hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 127.0.0.1 localhost ================================== 进程特权扫描特殊特权被允许： SeLoadDriverPrivilege [PID = 1448, C:\PROGRAM FILES\INTEL\WIRELESS\BIN\S24EVMON.EXE] 特殊特权被允许： SeDebugPrivilege [PID = 1396, C:\PROGRAM FILES\INTEL\WIRELESS\BIN\ZCFGSVC.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 1396, C:\PROGRAM FILES\INTEL\WIRELESS\BIN\ZCFGSVC.EXE] 特殊特权被允许： SeDebugPrivilege [PID = 1472, C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI.ACE\CLI.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 1472, C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI.ACE\CLI.EXE] 特殊特权被允许： SeDebugPrivilege [PID = 1716, C:\WINDOWS\STSYSTRA.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 1716, C:\WINDOWS\STSYSTRA.EXE] 特殊特权被允许： SeDebugPrivilege [PID = 3148, C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI.ACE\CLI.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 3148, C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI.ACE\CLI.EXE] 特殊特权被允许： SeDebugPrivilege [PID = 3612, C:\PROGRA~1\INTEL\WIRELESS\BIN\DOT1XCFG.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 3612, C:\PROGRA~1\INTEL\WIRELESS\BIN\DOT1XCFG.EXE] ================================== API HOOK N/A ================================== 隐藏进程 N/A ================================== 解决方案： 1.断开网络 2.下载XDELBOX，一定要完全解压到一个文件夹里运行，不然可能有异常。将下面的文件信息全部复制，然后打开Xdelbox直接在下面大窗口的空白处，使用右键菜单的“剪贴板导入不检查路径”导入，并全选文件选择右键菜单的“立刻重启删除” C:\WINDOWS\system32\FB8AE46A.EXE C:\WINDOWS\upxdnd.exe C:\WINDOWS\aeaptnlu.exe C:\WINDOWS\cmdbcs.exe C:\WINDOWS\WSockDrv32.exe C:\WINDOWS\DbgHlp32.exe C:\WINDOWS\LotusHlp.exe C:\WINDOWS\PTSShell.exe C:\WINDOWS\SHAProc.exe C:\DOCUME~1\lily\LOCALS~1\Temp\dat36.tmp C:\WINDOWS\system32\msosiocp.dll C:\Program Files\Internet Explorer\PLUGINS\Ns_Sys55.Sys C:\WINDOWS\system32\pedadt.dll C:\DOCUME~1\lily\LOCALS~1\Temp\tmp2C.tmp C:\WINDOWS\system32\drivers\msosfpids32.sys C:\DOCUME~1\lily\LOCALS~1\Temp\usbcams3.sys C:\WINDOWS\system32\ijougiemnaw.dll C:\WINDOWS\system32\eohsom.dll C:\WINDOWS\system32\ijougiemnaw.dll C:\WINDOWS\system32\gnolnait.dll C:\WINDOWS\system32\aapaenun.dll C:\WINDOWS\system32\hjiq.dll C:\WINDOWS\system32\msccrt.dll C:\WINDOWS\system32\cuhad.dll C:\WINDOWS\system32\taijoad.dll C:\WINDOWS\system32\mnauygniqaixnaij.dll C:\WINDOWS\system32\sve.dll C:\WINDOWS\system32\duygnef.dll C:\WINDOWS\system32\duygnef.dll C:\WINDOWS\system32\bchib.dll C:\WINDOWS\system32\slcs.dll C:\WINDOWS\system32\bauhgnem.dll C:\WINDOWS\system32\fifeei.dll 重启计算机以后会有两个系统进入的选择的倒计时界面第一个是你原来的windows系统第二个是这个软件给你设定的dos系统系统会自动选择进入第二个系统类似dos的界面滚动完毕以后病毒就被删除了之后会自动重启进入正常模式进入系统后，再做下面的：在扫日志的SRENG工具》启动项目》注册表删除 <upxdnd><C:\WINDOWS\upxdnd.exe> [] <faaefanp><C:\WINDOWS\aeaptnlu.exe> [] <msccrt><C:\WINDOWS\msccrt.exe> [] <cmdbcs><C:\WINDOWS\cmdbcs.exe> [] <WSockDrv32><C:\WINDOWS\WSockDrv32.exe> [] <DbgHlp32><C:\WINDOWS\DbgHlp32.exe> [] <LotusHlp><C:\WINDOWS\LotusHlp.exe> [] <PTSShell><C:\WINDOWS\PTSShell.exe> [] <SHAProc><C:\WINDOWS\SHAProc.exe> [] <{7FA4A83B-F99A-4bfc-A8E2-6A62B05D2C82}><C:\DOCUME~1\lily\LOCALS~1\Temp\dat36.tmp> [] <{50632D5C-B71B-4ba0-B012-3DC6F15C011B}><C:\WINDOWS\system32\msosiocp.dll> [N/A] <{D29DCEE0-457B-45A2-A92D-741B95B7723B}><C:\Program Files\Internet Explorer\PLUGINS\Ns_Sys55.Sys> [] <{5E907A48-400E-4EA8-9792-FFAE052D59E9}><C:\WINDOWS\system32\pedadt.dll> [] 在扫日志的SRENG工具》启动项目》服务》Win32服务应用程序》里面找下面项删除 DB5DC8CD / DB5DC8CD][Stopped/Auto Start] <C:\WINDOWS\system32\FB8AE46A.EXE -d><Microsoft Corporation 在扫日志的SRENG工具》启动项目》服务》驱动程序》里面找下面项删除 [drop / drop][Stopped/Auto Start] <\??\C:\DOCUME~1\lily\LOCALS~1\Temp\tmp2C.tmp><N/A> [fpids32 / fpids32][Running/Auto Start] <\??\C:\WINDOWS\system32\drivers\msosfpids32.sys><N/A> [Sc Manager / Sc Manager][Stopped/Manual Start] <\??\C:\DOCUME~1\lily\LOCALS~1\Temp\usbcams3.sys><N/A> 在扫日志的SRENG工具》系统修复》浏览器加载项》里面找下面删除 [] {D29DCEE0-457B-45A2-A92D-741B95B7723B} <C:\Program Files\Internet Explorer\PLUGINS\Ns_Sys55.Sys, N/A> [] {D29DCEE0-457B-45A2-A92D-741B95B7723B} <C:\Program Files\Internet Explorer\PLUGINS\Ns_Sys55.Sys, N/A> 升级杀毒软件至最新版本，全盘杀毒。这里官网下载Windows清理助手，清理系统。 http://www.arswp.com/
【发表评论】【加入收藏】【告诉好友】【打印此文】【关闭窗口】

上一篇文章： Trojan.psw.avx手动清除方法

下一篇文章：新型下载者(Win32.TrojDownloader.Guupk.ps.49152)“替身”系统文件下载木马