[CODE] 2010-04-17,22:54:40 System Repair Engineer 2.8.2.1321 Smallfrogs (http://www.KZTechs.com) Windows Vista Home Premium Edition Service Pack 1 (Build 6001) - Administrative User - Completed Functions Allowed Follow item(s) have been selected: All Boot Items (Including Registry, Startup Folders, Services and so on) Browser Add-ons Running Processes (Including process model information) File Associations Winsock Provider Autorun.Inf HOSTS File Process Privileges Scan Scheduled Tasks Windows Security Update Check API HOOK Hidden Process Boot Items Registry [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] [(Verified)Microsoft Windows] [File is missing] [(Verified)Microsoft Windows] <"C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background> [(Verified)Microsoft Corporation] <"C:\FlashGet Network\Flashget 3\Flashget3.exe" -minimize> [File is missing] [File is missing] <"C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized> [(Verified)Skype Technologies SA] <"C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"> [(Verified)Google Inc] <"C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe" -autorun> [(Verified)DAEMON Tools Code Signing Services] [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] [(Verified)Hewlett-Packard Company] [(Verified)Hewlett-Packard] <"c:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"> [File is missing] <"c:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"> [File is missing] <"c:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\CyberLink\PowerDirector" UpdateWithCreateOnce "SOFTWARE\CyberLink\PowerDirector\7.0"> [File is missing] <"c:\Program Files (x86)\CyberLink\CyberLink DVD Suite Deluxe\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\CyberLink\CyberLink DVD Suite Deluxe" UpdateWithCreateOnce "Software\CyberLink\PowerStarter"> [File is missing] <"c:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe"> [(Verified)CyberLink] <"c:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume> [(Verified)Microsoft Corporation] <"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"> [(Verified)Adobe Systems, Incorporated] <"C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide> [(Verified)Logitech Inc] <"C:\Program Files (x86)\Java\jre6\bin\jusched.exe"> [(Verified)Sun Microsystems, Inc.] <"C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot> [(Verified)Nuance Communications, Inc.] <"C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpwareSE4.exe"> [(Verified)Nuance Communications, Inc.] <360Safetray><"C:\Program Files (x86)\360\360safe\safemon\360tray.exe" /start> [(Verified)Qizhi Software (beijing) Co. Ltd] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Windows] [(Verified)Microsoft Windows] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] [(Verified)Microsoft Windows] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon] [Kaspersky Lab] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler] <{8C7461EF-2B13-11d2-BE35-3078302C2030}><%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Windows] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] <%SystemRoot%\system32\unregmp2.exe /ShowWMP> [(Verified)Microsoft Windows] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}] [(Verified)Microsoft Windows] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}] <"C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP> [(Verified)Microsoft Windows] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] <%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] <"%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}] <%SystemRoot%\system32\unregmp2.exe /FirstLogon /Shortcuts /RegBrowsers /ResetMUI> [(Verified)Microsoft Windows] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}] [(Verified)Microsoft Windows] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}] [(Verified)Microsoft Windows] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}] [(Verified)Microsoft Corporation] [HKEY_CURRENT_USER\Control Panel\Desktop] [(Verified)Microsoft Windows] ================================== Startup Folders [HP Digital Imaging Monitor] C:\PROGRA~2\HP\DIGITA~1\bin\hpqtra08.exe [Hewlett-Packard Co.]> [HP Digital Imaging Monitor] C:\PROGRA~2\HP\DIGITA~1\bin\hpqtra08.exe [Hewlett-Packard Co.]> ================================== Services [Application Experience / AeLookupSvc][Stopped/Auto Start] %SystemRoot%\System32\aelupsvc.dll> [Agere Modem Call Progress Audio / AgereModemAudio][Stopped/Auto Start] [Google Update Service (gupdate) / gupdate][Stopped/Auto Start] <"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc> [Google Software Updater / gusvc][Stopped/Manual Start] <"C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe"> [Health Key and Certificate Management / hkmsvc][Stopped/Manual Start] %SystemRoot%\system32\kmsvc.dll> [HP Health Check Service / HP Health Check Service][Stopped/Auto Start] <"c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe"> [hpqcxs08 / hpqcxs08][Stopped/Manual Start] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll> [HP CUE DeviceDiscovery Service / hpqddsvc][Stopped/Auto Start] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll> [Intel(R) Matrix Storage Event Monitor / IAANTMON][Stopped/Auto Start] [IKE and AuthIP IPsec Keying Modules / IKEEXT][Stopped/Auto Start] %SystemRoot%\System32\ikeext.dll> [PnP-X IP Bus Enumerator / IPBusEnum][Stopped/Manual Start] %SystemRoot%\system32\ipbusenum.dll> [IP Helper / iphlpsvc][Stopped/Auto Start] %SystemRoot%\System32\iphlpsvc.dll> [Kingsoft Common Content Service / KSDSVC][Stopped/Auto Start] [KtmRm for Distributed Transaction Coordinator / KtmRm][Stopped/Auto Start] %systemroot%\system32\msdtckrm.dll> [Server / LanmanServer][Stopped/Auto Start] %SystemRoot%\system32\srvsvc.dll> [Workstation / LanmanWorkstation][Stopped/Auto Start] %SystemRoot%\System32\wkssvc.dll> [LightScribeService Direct Disc Labeling Service / LightScribeService][Stopped/Auto Start] <"c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe"> [Link-Layer Topology Discovery Mapper / lltdsvc][Stopped/Manual Start] %SystemRoot%\System32\lltdsvc.dll> [TCP/IP NetBIOS Helper / lmhosts][Stopped/Auto Start] %SystemRoot%\System32\lmhsvc.dll> [Process Monitor / LVPrcS64][Stopped/Auto Start] <"C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe"> [Windows Media Center Extender Service / Mcx2Svc][Stopped/Disabled] %SystemRoot%\system32\Mcx2Svc.dll> [Multimedia Class Scheduler / MMCSS][Stopped/Auto Start] %SystemRoot%\system32\mmcss.dll> [Windows Firewall / MpsSvc][Stopped/Auto Start] %SystemRoot%\system32\mpssvc.dll> [Net Driver HPZ12 / Net Driver HPZ12][Stopped/Auto Start] C:\Windows\system32\HPZinw12.dll> [Norton Internet Security / Norton Internet Security][Stopped/Auto Start] <"C:\Program Files (x86)\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe" /s "Norton Internet Security" /m "C:\Program Files (x86)\Norton Internet Security\Engine\16.0.0.125\diMaster.dll" /prefetch:1><(File is missing)> [Network Store Interface Service / nsi][Stopped/Auto Start] %systemroot%\system32\nsisvc.dll> [Program Compatibility Assistant Service / PcaSvc][Stopped/Auto Start] %SystemRoot%\System32\pcasvc.dll> [Plug and Play / PlugPlay][Running/Auto Start] %SystemRoot%\system32\umpnpmgr.dll> [Pml Driver HPZ12 / Pml Driver HPZ12][Stopped/Auto Start] C:\Windows\system32\HPZipm12.dll> [IPsec Policy Agent / PolicyAgent][Stopped/Auto Start] %SystemRoot%\System32\ipsecsvc.dll> [User Profile Service / ProfSvc][Running/Auto Start] %systemroot%\system32\profsvc.dll> [Windows Defender / WinDefend][Running/Auto Start] %ProgramFiles%\Windows Defender\mpsvc.dll> [Windows Management Instrumentation / Winmgmt][Running/Auto Start] %SystemRoot%\system32\wbem\WMIsvc.dll> [WLAN AutoConfig / Wlansvc][Stopped/Manual Start] %SystemRoot%\System32\wlansvc.dll> [主动防御 / ZhuDongFangYu][Stopped/Auto Start] <"C:\Program Files (x86)\360\360safe\deepscan\zhudongfangyu.exe"><360.cn> ================================== Drivers [adp94xx / adp94xx][Stopped/Disabled] <\SystemRoot\system32\drivers\adp94xx.sys> [adpahci / adpahci][Stopped/Disabled] <\SystemRoot\system32\drivers\adpahci.sys> [adpu160m / adpu160m][Stopped/Disabled] <\SystemRoot\system32\drivers\adpu160m.sys> [adpu320 / adpu320][Stopped/Disabled] <\SystemRoot\system32\drivers\adpu320.sys> [Agere Systems Soft Modem / AgereSoftModem][Stopped/Manual Start] [aic78xx / aic78xx][Stopped/Disabled] <\SystemRoot\system32\drivers\djsvs.sys> [aliide / aliide][Stopped/Disabled] <\SystemRoot\system32\drivers\aliide.sys> [arc / arc][Stopped/Disabled] <\SystemRoot\system32\drivers\arc.sys> [arcsas / arcsas][Stopped/Disabled] <\SystemRoot\system32\drivers\arcsas.sys> [BFSDRV / BFSDRV][Stopped/System Start] <\??\C:\Windows\system32\drivers\bfsdrv.sys> [BREGDRV / BREGDRV][Stopped/System Start] <\??\C:\Windows\system32\drivers\bregdrv.sys> [Brother USB Mass-Storage Lower Filter Driver / BrFiltLo][Stopped/Manual Start] <\SystemRoot\system32\drivers\brfiltlo.sys> [Brother USB Mass-Storage Upper Filter Driver / BrFiltUp][Stopped/Manual Start] <\SystemRoot\system32\drivers\brfiltup.sys> [Brother MFC Serial Port Interface Driver (WDM) / Brserid][Stopped/Disabled] <\SystemRoot\system32\drivers\brserid.sys> [Brother WDM Serial driver / BrSerWdm][Stopped/Disabled] <\SystemRoot\system32\drivers\brserwdm.sys> [Brother MFC USB Fax Only Modem / BrUsbMdm][Stopped/Disabled] <\SystemRoot\system32\drivers\brusbmdm.sys> [Brother MFC USB Serial WDM Driver / BrUsbSer][Stopped/Manual Start] <\SystemRoot\system32\drivers\brusbser.sys> [cmdide / cmdide][Stopped/Disabled] <\SystemRoot\system32\drivers\cmdide.sys> [Intel(R) PRO/1000 NDIS 6 Adapter Driver / E1G60][Stopped/Manual Start] [EfiSystemMon / EfiMon][Stopped/System Start] [elxstor / elxstor][Stopped/Disabled] <\SystemRoot\system32\drivers\elxstor.sys> [HookPort / HookPort][Stopped/Boot Start] <\SystemRoot\\??\C:\Windows\system32\drivers\hookport.sys> [HpCISSs / HpCISSs][Stopped/Disabled] <\SystemRoot\system32\drivers\hpcisss.sys> [Intel RAID Controller / iaStor][Running/Boot Start] <\SystemRoot\system32\drivers\iastor.sys> [Intel RAID Controller Vista / iaStorV][Stopped/Disabled] <\SystemRoot\system32\drivers\iastorv.sys> [igfx / igfx][Stopped/Manual Start] [iirsp / iirsp][Stopped/Disabled] <\SystemRoot\system32\drivers\iirsp.sys> [Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Stopped/Manual Start] [IP in IP Tunnel Driver / IpInIp][Stopped/Manual Start] [ITEATAPI_Service_Install / iteatapi][Stopped/Disabled] <\SystemRoot\system32\drivers\iteatapi.sys> [ITERAID_Service_Install / iteraid][Stopped/Disabled] <\SystemRoot\system32\drivers\iteraid.sys> [LSI_FC / LSI_FC][Stopped/Disabled] <\SystemRoot\system32\drivers\lsi_fc.sys> [LSI_SAS / LSI_SAS][Stopped/Disabled] <\SystemRoot\system32\drivers\lsi_sas.sys> [LSI_SCSI / LSI_SCSI][Stopped/Disabled] <\SystemRoot\system32\drivers\lsi_scsi.sys> [Logitech LVPr2M64 Driver / LVPr2M64][Stopped/Manual Start] <> [LVPr2M64 Driver / LVPr2Mon][Stopped/Manual Start] <> [megasas / megasas][Stopped/Disabled] <\SystemRoot\system32\drivers\megasas.sys> [MegaSR / MegaSR][Stopped/Disabled] <\SystemRoot\system32\drivers\megasr.sys> [Mraid35x / Mraid35x][Stopped/Disabled] <\SystemRoot\system32\drivers\mraid35x.sys> [NAVENG / NAVENG][Stopped/Manual Start] <\??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20081126.003\ENG64.SYS> [NAVEX15 / NAVEX15][Stopped/Manual Start] <\??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20081126.003\EX64.SYS> [nfrd960 / nfrd960][Stopped/Disabled] <\SystemRoot\system32\drivers\nfrd960.sys> [NVIDIA nForce RAID Driver / nvraid][Stopped/Disabled] <\SystemRoot\system32\drivers\nvraid.sys> [nvstor / nvstor][Stopped/Disabled] <\SystemRoot\system32\drivers\nvstor.sys> [IPX Traffic Filter Driver / NwlnkFlt][Stopped/Manual Start] [IPX Traffic Forwarder Driver / NwlnkFwd][Stopped/Manual Start] [Logitech QuickCam Express(PID_0928) / PID_0928][Stopped/Manual Start] [QLogic Fibre Channel Miniport Driver / ql2300][Stopped/Disabled] <\SystemRoot\system32\drivers\ql2300.sys> [QLogic iSCSI Miniport Driver / ql40xx][Stopped/Disabled] <\SystemRoot\system32\drivers\ql40xx.sys> [Quantum DeepScanner Servers / qutmdserv][Stopped/Manual Start] <\??\C:\Windows\system32\drivers\qutmdrv.sys><360.cn> [qutmipc / qutmipc][Stopped/System Start] <\??\C:\Windows\system32\drivers\qutmipc.sys><360安全中心> [Realtek 8169 NT Driver / RTL8169][Stopped/Manual Start] [SiSRaid4 / SiSRaid4][Stopped/Disabled] <\SystemRoot\system32\drivers\sisraid4.sys> [sptd / sptd][Running/Boot Start] <\SystemRoot\System32\Drivers\sptd.sys> [SRTSP / SRTSP][Stopped/System Start] <\??\C:\Windows\system32\drivers\NISx64\1000000.07D\SRTSP64.SYS> [SRTSPX / SRTSPX][Stopped/System Start] <\??\C:\Windows\system32\drivers\NISx64\1000000.07D\SRTSPX64.SYS> [Symc8xx / Symc8xx][Stopped/Disabled] <\SystemRoot\system32\drivers\symc8xx.sys> [Sym_hi / Sym_hi][Stopped/Disabled] <\SystemRoot\system32\drivers\sym_hi.sys> [Sym_u3 / Sym_u3][Stopped/Disabled] <\SystemRoot\system32\drivers\sym_u3.sys> [tcphoc / tcphoc][Stopped/Manual Start] <\??\C:\Program Files (x86)\Thunder Network\Thunder\Program\tcphoc.sys> [uliahci / uliahci][Stopped/Disabled] <\SystemRoot\system32\drivers\uliahci.sys> [UlSata / UlSata][Stopped/Disabled] <\SystemRoot\system32\drivers\ulsata.sys> [ulsata2 / ulsata2][Stopped/Disabled] <\SystemRoot\system32\drivers\ulsata2.sys> [viaide / viaide][Stopped/Disabled] <\SystemRoot\system32\drivers\viaide.sys> [vsmraid / vsmraid][Stopped/Disabled] <\SystemRoot\system32\drivers\vsmraid.sys> ================================== Browser Add-ons [ThunderAtOnce Class] {01443AEC-0FD1-40fd-9C87-E93D1494C233} [Adobe PDF Link Helper] {18DF081C-E8AD-4283-A596-FA578C2EBDC3} [] {5C255C8A-E604-49b4-9D64-90988571CECB} <, > [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} [Windows Live Sign-in Helper] {9030D464-4C02-4ABF-8ECC-5164760863C6} [谷歌金山词霸for IE] {A28581A7-E2A8-4b6c-9CC9-4A4CC1EFD55A} [Google Toolbar Helper] {AA58ED58-01DD-4d91-8333-CF10577473F7} [Google Toolbar Notifier BHO] {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} [SafeMon Class] {B69F34DD-F0F9-42DC-9EDD-957187DA688D} [Microsoft Live Search Toolbar Helper] {d2ce3e00-f94a-4740-988e-03dc2f38c34f} [Java(tm) Plug-In 2 SSV Helper] {DBC80044-A445-435b-BC74-9C25C1C588A9} [HP Smart BHO Class] {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} [BlogThisToolbarButton Class] {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} [信息检索(&R)] {92780B25-18CC-41C8-B9BE-3C9C571A8263} [CBMenu Class] {9D5CCDC3-545F-4418-8AEC-9CD2773B4861} [ClipBookBtn Class] {DDE87865-83C5-48c4-8357-2F5B1AA84522} [Microsoft Live Search Toolbar] {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} [Support.com Configuration Class] {01113300-3E00-11D2-8470-0060089874ED} [] {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} <, > [Java Plug-in 1.6.0_15] {8AD9C840-044E-11D1-B3E9-00805F499D93} [CCTVUpdateInstall] {AC414988-E5BB-4C2C-873B-EA53D2F3D23A} [Java Plug-in 1.6.0_15] {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} [Java Plug-in 1.6.0_15] {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} [Microsoft Outlook 8.0 Object Library] {0006F033-0000-0000-C000-000000000046} <, > [Microsoft Office Outlook] {0006F03A-0000-0000-C000-000000000046} <, > [] {00A6FAF1-072E-44CF-8957-5838F569A31D} <, > [Google Script Object] {00EF2092-6AC5-47C0-BD25-CF2D5D657FEB} [Support.com Configuration Class] {01113300-3E00-11D2-8470-0060089874ED} [ThunderAtOnce Class] {01443AEC-0FD1-40FD-9C87-E93D1494C233} [] {07B18EA1-A523-4961-B6BB-170DE4475CCA} <, > [] {07B18EA9-A523-4961-B6BB-170DE4475CCA} <, > [] {07B18EAB-A523-4961-B6BB-170DE4475CCA} <, > [] {08B0E5C0-4FCB-11CF-AAA5-00401C608501} <, > [] {116BA71C-8187-4F15-9A1F-C9D6289155D1} <, > [Adobe PDF Link Helper] {18DF081C-E8AD-4283-A596-FA578C2EBDC3} [InformationCardSigninHelper Class] {19916E01-B44E-4E31-94A4-4696DF46157B} [] {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} <, > [Microsoft Live Search Toolbar] {1E61ED7C-7CB8-49D6-B9E9-AB4C880C8414} [] {219C3416-8CB2-491A-A3C7-D9FCDDC9D600} <, > [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} [Google Toolbar] {2318C2B1-4965-11D4-9B18-009027A5CD4F} [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} [XML DOM Document] {2933BF90-7B36-11D2-B20E-00C04F983E60} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A> [] {2974c985-8151-4de5-b23c-b875f0a8522f} <, > [DAEMON Tools Toolbar] {32099AAC-C132-4136-9E9A-4E364A424E17} [IETag Factory] {38481807-CA0E-42D2-BF39-B33AF135CC4D} [XML Document] {48123BC4-99D9-11D1-A6B3-00C04FD91555} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A> [Thunder Agent Class] {485463B7-8FB2-4B3B-B29B-8B919B0EACCE} [TVAnts ActiveX Control] {4C833081-D026-4FF8-968F-7EAB660D2FBA} [] {5C255C8A-E604-49B4-9D64-90988571CECB} <, > [PowerPlayer Control] {5EC7C511-CD0F-42E6-830C-1BD9882F3458} [] {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} <, > [] {63D0ED2C-B45B-4458-8B3B-60C69BBBD83C} <, > [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} [] {6D53EC84-6AAE-4787-AEEE-F4628F01010C} <, > [MediaComm Class] {7670648D-461B-42AF-BDFE-46D26AF5EFF2} [] {77FEF28E-EB96-44FF-B511-3185DEA48697} <, > [] {7E853D72-626A-48EC-A868-BA8D5E23E045} <, > [] {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} <, > [XDownloaddManager Class] {802F530B-A8F6-4631-AE49-6BACAAC6373E} [360SafeLive] {87515F61-A66C-4319-A0E0-D416CB8059E3} [Microsoft Web Browser] {8856F961-340A-11D0-A96B-00C04FD705A2} [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} [XML DOM Document 4.0] {88D969C0-F192-11D4-A65F-0040963251E5} [XML HTTP 4.0] {88D969C5-F192-11D4-A65F-0040963251E5} [XML DOM Document 6.0] {88D96A05-F192-11D4-A65F-0040963251E5} <%SystemRoot%\System32\msxml6.dll, (Signed) N/A> [Free Threaded XML DOM Document 6.0] {88D96A06-F192-11D4-A65F-0040963251E5} <%SystemRoot%\System32\msxml6.dll, (Signed) N/A> [XSL Template 6.0] {88D96A08-F192-11D4-A65F-0040963251E5} <%SystemRoot%\System32\msxml6.dll, (Signed) N/A> [XML HTTP 6.0] {88D96A0A-F192-11D4-A65F-0040963251E5} <%SystemRoot%\System32\msxml6.dll, (Signed) N/A> [SopCore Control] {8FEFF364-6A5F-4966-A917-A3AC28411659} [Windows Live Sign-in Helper] {9030D464-4C02-4ABF-8ECC-5164760863C6} [] {92780B25-18CC-41C8-B9BE-3C9C571A8263} <, > [cpbrkpie Control] {9522B3FB-7A2B-4646-8AF6-36E7F593073C} [] {95B3F550-91C4-4627-BCC4-521288C52977} <, > [OFrameObject Class] {9701758C-4373-482E-B13C-776C048EC890} [] {9D5CCDC3-545F-4418-8AEC-9CD2773B4861} <, > [VersionDetector Class] {9EFF1953-9694-47B1-AEF6-B2A3FE8BFE9B} [谷歌金山词霸for IE] {A28581A7-E2A8-4B6C-9CC9-4A4CC1EFD55A} [] {A986E409-30CC-4185-89BB-AB212C104524} <, > [Google Toolbar Helper] {AA58ED58-01DD-4D91-8333-CF10577473F7} [CCTVUpdateInstall] {AC414988-E5BB-4C2C-873B-EA53D2F3D23A} [DapCtrl Class] {ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8} [Google Toolbar Notifier BHO] {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} [] {B070D3E3-FEC0-47D9-8E8A-99D4EEB3D3B0} <, > [] {B580CF65-E151-49C3-B73F-70B13FCA8E86} <, > [SafeMon Class] {B69F34DD-F0F9-42DC-9EDD-957187DA688D} [RDS.DataSpace] {BD96C556-65A3-11D0-983A-00C04FC29E36} <%CommonProgramFiles(x86)%\System\msadc\msadco.dll, (Signed) N/A> [] {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} <, > [Adobe PDF Reader] {CA8A9780-280D-11CF-A24D-444553540000} [Deployment Toolkit] {CAFEEFAC-DEC7-0000-0000-ABCDEFFEDCBA} [AUDIO__MP3 Moniker Class] {CD3AFA76-B84F-48F0-9393-7EDC34128127} [AUDIO__X_MS_WMA Moniker Class] {CD3AFA84-B84F-48F0-9393-7EDC34128127} [VIDEO__X_MS_ASF Moniker Class] {CD3AFA8F-B84F-48F0-9393-7EDC34128127} [VIDEO__X_MS_WMV Moniker Class] {CD3AFA94-B84F-48F0-9393-7EDC34128127} [Microsoft Url Search Hook] {CFBFAE00-17A6-11D0-99CB-00C04FD64497} [Msxml] {CFC399AF-D876-11D0-9C10-00C04FC99C8E} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A> [Windows Live Sign-in Control] {D2517915-48CE-4286-970F-921E881B8C5C} [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} [Microsoft Live Search Toolbar Helper] {D2CE3E00-F94A-4740-988E-03DC2F38C34F} [Java(tm) Plug-In 2 SSV Helper] {DBC80044-A445-435B-BC74-9C25C1C588A9} [ClipBookBtn Class] {DDE87865-83C5-48C4-8357-2F5B1AA84522} [Microsoft Silverlight] {DFEAF541-F3E1-4C24-ACAC-99C30715084A} [] {E1771B7F-98BE-407F-BA67-AA16ADA5D0C5} [] {E2883E8F-472F-4FB0-9522-AC9BF37916A7} <, > [] {e3e02f12-2adb-478c-8742-5f0819f9f0f4} <"C:\Users\QIANG\AppData\Roaming\Move Networks\plugins\npqmp071705000014.dll", N/A> [] {e473a65c-8087-49a3-affd-c5bc4a10669b} <"C:\Users\QIANG\AppData\Roaming\Move Networks\plugins\npqmp071705000014.dll", N/A> [XML HTTP Request] {ED8C108E-4349-11D2-91A4-00C04F7969E8} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A> [XPPlayer Class] {F3E70CEA-956E-49CC-B444-73AFE593AD7F} [XML DOM Document 3.0] {F5078F32-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A> [Free Threaded XML DOM Document 3.0] {F5078F33-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A> [XML HTTP 3.0] {F5078F35-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A> [XSL Template 3.0] {F5078F36-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A> [XML DOM Document] {F6D90F11-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A> [XML HTTP] {F6D90F16-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A> [] {fc345d4c-b8f4-4674-bff7-3c37d2e535ee} <"C:\Users\QIANG\AppData\Roaming\Move Networks\plugins\npqmp071705000014.dll", N/A> [] {fd6484ed-ebe3-4c3d-938a-8238003b41b7} <"C:\Users\QIANG\AppData\Roaming\Move Networks\plugins\npqmp071705000014.dll", N/A> [HP Smart BHO Class] {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} [Google Sidewiki...] [使用迅雷下载] [使用迅雷下载全部链接] [导出到 Microsoft Office Excel(&X)] [百度一下所选文字 (&S)] [百度一下所选文字(&S)] ================================== Running Processes [PID: 1648 / QIANG][C:\Users\QIANG\Desktop\sreng2\belial.com] [Smallfrogs Studio, 2.8.2.1321] [PID: 1556 / QIANG][C:\Users\QIANG\Desktop\sreng2\SRE93a68df7.EXE] [Smallfrogs Studio, 2.8.2.1321] [C:\Users\QIANG\Desktop\sreng2\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15] ================================== File Associations .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %*] .COM OK. ["%1" %*] .PIF OK. ["%1" %*] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %*] .SCR OK. ["%1" /S] .CHM OK. ["%SystemRoot%\hh.exe" %1] .HLP OK. [%SystemRoot%\winhlp32.exe %1] .INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .VBS OK. ["%SystemRoot%\System32\WScript.exe" "%1" %*] .JS Error. [C:\Windows\SysWOW64\WScript.exe "%1" %*] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock Provider N/A ================================== Autorun.Inf N/A ================================== HOSTS File 127.0.0.1 localhost ::1 localhost ================================== Process Privileges Scan N/A ================================== Scheduled Tasks N/A ================================== Windows Security Update Check N/A ================================== API HOOK N/A ================================== Hidden Process N/A ================================== [/CODE]