请问Trojan.Spy.Delf.UC是高风险的木马吗？(已解决)

MyChat 数位男女

手机版

地图

繁体

您是第 15643 个阅读者

<< 1 2 下页 >>

(共 2 页)

可列印版加为IE收藏收藏主题上一主题 | 下一主题

tear

级别: 知名人士

x748

▼

[问题讨论] 请问Trojan.Spy.Delf.UC是高风险的木马吗？(已解决)


	小弟有用Spybot Doctor扫出Trojan.Spy.Delf.UC 它并没有感染任何档案单独只是登录档里的一串机码但是用AVG就没有发现它的踪迹且运用熊猫卫士的线上查杀病毒木马也没发现但Spybot Doctor告知它是高危险的小弟有用Google查询这只木马的叙述也无获得相关资讯（资讯很少）请问各位高手大大们～这是单纯的误判么？（用Spybot Doctor可删除之～但过一阵子之后又会出现）感谢各位大大的宝贵意见～如有风险且需要清除的话小弟会扫详细的log档～ [ 此文章被tear在2007-04-17 13:00重新编辑 ]

飘雨没意境，下雪没闲情。蜚短流长～
x0 [楼主] From：台湾 \| Posted：2007-04-15 00:03 \|

彗星风采

级别: 小人物

x24

▲ ▼

1..请提供防毒软体所显示的中毒名称及详细路径..

2..请用多家线上扫毒交叉扫描看看...

3...若问题仍未解决请参考置顶文章跑SREng报表贴上来判读...


x1 [1 楼] From：台湾中华电信HINET \| Posted：2007-04-15 23:15 \|

tear

级别: 知名人士

x748

▲ ▼

这是扫描后的结果

木马指向机码
HKEY_LOCAL_MACHINE\SOFTWARE\Tencent
HKEY_LOCAL_MACHINE\SOFTWARE\Tencent\PLATFORM_TYPE_LIST
HKEY_LOCAL_MACHINE\SOFTWARE\Tencent\PLATFORM_TYPE_LIST\1

看得小弟一片雾沙沙

飘雨没意境，下雪没闲情。蜚短流长～
x0 [2 楼] From：台湾 \| Posted：2007-04-16 02:15 \|

彗星风采

级别: 小人物

x24

▲ ▼

这是大陆腾讯公司那边的东西...通常是有用QQ之类的...
可以清除喔... 重点是有清除了嬷????
或者是清除完会再生呢?
如有再生情形请改跑SREng报表贴上来唷!

[ 此文章被彗星风采在2007-04-16 22:00重新编辑 ]


x1 [3 楼] From：台湾中华电信HINET \| Posted：2007-04-16 21:32 \|

tear

级别: 知名人士

x748

▲ ▼

您好

小弟有用Spybot Doctor清除了

而Spybot Doctor在清除可疑机码时会将它丢入隔离所

让使用者自行决定是否要完全移除它

倘若小弟到隔离所移除它后～

过一段时间再扫就会出现它的踪迹

但如果没将它由隔离所移除～似乎将不再会出现

小弟有扫SREng LOG档上来了～烦请您及各位高手大大帮忙检视

不胜感激

p.s.小弟并没有使用过QQ即时通唷

--------------------------------------------------------------------------------------

复制程式


2007-04-16,22:34:42

System Repair Engineer 2.4.12.806
Smallfrogs ([url]http://www.KZTechs.com[/url])

Windows XP Professional Service Pack 2 (Build 2600) - Administrative User - Completed Functions Allowed

Follow item(s) have been choosed:
    All Boot Items (Including Registry, Startup Folders, Services and so on)
    Browser Add-ons
    Runing Processes (Including process model information)
    File Associations
    Winsock Provider
    Autorun.Inf
    HOSTS File


Boot Items
Registry
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\windows\system32\ctfmon.exe>  [(Verified)Microsoft Windows Publisher]
    <Active Desktop Calendar><C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe>  [XemiComputers ltd.]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [(Verified)Microsoft Windows Publisher]
    <ccApp><"C:\Program Files\Common Files\Symantec Shared\ccApp.exe">  [(Verified)Symantec Corporation]
    <vptray><C:\PROGRA~1\SYMANT~1\SYMANT~2\VPTray.exe>  [(Verified)Symantec Corporation]
    <SoundMan><; SOUNDMAN.EXE>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <NvCplDaemon><; RUNDLL32.EXE C:\windows\system32\NvCpl.dll,NvStartup>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <nwiz><; nwiz.exe /install>  [NVIDIA Corporation]
    <NvMediaCenter><; RUNDLL32.EXE C:\windows\system32\NvMcTray.dll,NvTaskbarInit>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <CJIMETIPSYNC><C:\Program Files\Common Files\Microsoft Shared\IME\IMTC65\CHANGJIE\CINTLCFG.EXE /CJIMETIPSync>  [(Verified)Microsoft Corporation]
    <PHIMETIPSYNC><C:\Program Files\Common Files\Microsoft Shared\IME\IMTC65\PHONETIC\TINTLCFG.EXE /PHIMETIPSync>  [(Verified)Microsoft Corporation]
    <CloneCDTray><"C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s>  [SlySoft, Inc.]
    <VirtualCloneDrive><"C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s>  [Elaborate Bytes AG]
    <MSNDreyePlugin><C:\Program Files\Inventec\Dreye\DreyeMT\msnplugin.exe /h>  []
    <ISUSPM Startup><C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup>  [InstallShield Software Corporation]
    <ISUSScheduler><"C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start>  [InstallShield Software Corporation]
    <NeroFilterCheck><C:\WINDOWS\system32\NeroCheck.exe>  [Ahead Software Gmbh]
    <RunShadowTip><C:\windows\system32\shadow\ShadowTip.exe>  [PowerShadow]
    <Kernel and Hardware Abstraction Layer><KHALMNPR.EXE>  [N/A]
    <LogitechCommunicationsManager><"C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe">  [(Verified)Logitech Inc]
    <LogitechQuickCamRibbon><"C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide>  [(Verified)Logitech Inc]
    <kX Mixer><C:\windows\system32\kxmixer.exe --startup>  [Eugene Gavrilov]
    <SunJavaUpdateSched><"C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe">  [(Verified)"Sun Microsystems, Inc."]
    <使用者介面自订><RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp>  [微软公司]
    <Norton Ghost 10.0><"C:\Program Files\Norton Ghost\Agent\GhostTray.exe">  [(Verified)Symantec Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Windows Publisher]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{57B86673-276A-48B2-BAE7-C6DBB3020EB8}><C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll>  [Anti-Malware Development a.s.]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    <WPDShServiceObj><C:\WINDOWS\system32\WPDShServiceObj.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\NavLogon]
    <WinlogonNotify: NavLogon><C:\windows\system32\NavLogon.dll>  [(Verified)Symantec Corporation]

==================================
Startup Folders
[ComproRemote]
  <C:\Documents and Settings\All Users\「开始」功能表\程式集\启动\ComproRemote.lnk --> C:\PROGRA~1\COMMON~1\VIDEOM~1\COMPRO~1.EXE [Compro Technology, Inc.]><N>
[ComproSchedulerDTV]
  <C:\Documents and Settings\All Users\「开始」功能表\程式集\启动\ComproSchedulerDTV.lnk --> C:\PROGRA~1\COMMON~1\VIDEOM~1\COMPRO~2.EXE [Compro Technology, Inc.]><N>
[Microsoft Office OneNote 2003 快速启动]
  <C:\Documents and Settings\All Users\「开始」功能表\程式集\启动\Microsoft Office OneNote 2003 快速启动.lnk --> C:\PROGRA~1\MICROS~2\OFFICE11\ONENOTEM.EXE [Microsoft Corporation]><H>

==================================
Services
[AVG Anti-Spyware Guard / AVG Anti-Spyware Guard][Running/Auto Start]
  <C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe><Anti-Malware Development a.s.>
[Symantec Event Manager / ccEvtMgr][Running/Auto Start]
  <"C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"><Symantec Corporation>
[Symantec Network Proxy / ccProxy][Running/Auto Start]
  <"C:\Program Files\Common Files\Symantec Shared\ccProxy.exe"><Symantec Corporation>
[Symantec Password Validation / ccPwdSvc][Stopped/Manual Start]
  <"C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe"><Symantec Corporation>
[Symantec Settings Manager / ccSetMgr][Running/Auto Start]
  <"C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"><Symantec Corporation>
[Symantec AntiVirus Definition Watcher / DefWatch][Running/Auto Start]
  <"C:\Program Files\Symantec Client Security\Symantec AntiVirus\DefWatch.exe"><Symantec Corporation>
[Windows Presentation Foundation Font Cache 3.0.0.0 / FontCache3.0.0.0][Stopped/Manual Start]
  <C:\windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe><Microsoft Corporation>
[GEARSecurity / GEARSecurity][Running/Auto Start]
  <C:\windows\System32\GEARSec.exe><GEAR Software>
[Windows CardSpace / idsvc][Stopped/Manual Start]
  <"C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe"><Microsoft Corporation>
[IS Service / ISSVC][Running/Auto Start]
  <"C:\Program Files\Symantec Client Security\Symantec Client Firewall\ISSVC.exe"><Symantec Corporation>
[Process Monitor / LVPrcSrv][Running/Auto Start]
  <c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe><Logitech Inc.>
[LVSrvLauncher / LVSrvLauncher][Stopped/Auto Start]
  <C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe><Logitech Inc.>
[Net.Tcp Port Sharing Service / NetTcpPortSharing][Stopped/Disabled]
  <"C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe"><Microsoft Corporation>
[Norton Ghost / Norton Ghost][Running/Auto Start]
  <C:\Program Files\Norton Ghost\Agent\VProSvc.exe><Symantec Corporation>
[NVIDIA Display Driver Service / NVSvc][Running/Auto Start]
  <C:\windows\system32\nvsvc32.exe><NVIDIA Corporation>
[PDEngine / PDEngine][Stopped/Manual Start]
  <"C:\Program Files\Raxco\PerfectDisk\PDEngine.exe"><Raxco Software, Inc.>
[PDScheduler / PDSched][Running/Auto Start]
  <"C:\Program Files\Raxco\PerfectDisk\PDSched.exe"><Raxco Software, Inc.>
[SavRoam / SavRoam][Stopped/Manual Start]
  <"C:\Program Files\Symantec Client Security\Symantec AntiVirus\SavRoam.exe"><symantec>
[PC Tools Spyware Doctor / SDhelper][Running/Auto Start]
  <C:\Program Files\Spyware Doctor\sdhelp.exe><PC Tools Research Pty Ltd>
[Shadow System Service / ShadowSystemService][Running/Auto Start]
  <C:\windows\system32\shadow\ShadowService.exe><N/A>
[Symantec Network Drivers Service / SNDSrvc][Running/Auto Start]
  <"C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe"><Symantec Corporation>
[Symantec SPBBCSvc / SPBBCSvc][Stopped/Manual Start]
  <"C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe"><Symantec Corporation>
[StarWind iSCSI Service / StarWindService][Running/Auto Start]
  <C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe><Rocket Division Software>
[Symantec AntiVirus / Symantec AntiVirus][Running/Auto Start]
  <"C:\Program Files\Symantec Client Security\Symantec AntiVirus\Rtvscan.exe"><Symantec Corporation>
[Symantec Core LC / Symantec Core LC][Running/Manual Start]
  <C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe><Symantec Corporation>
[Symantec SecurePort / SymSecurePort][Running/Auto Start]
  <"C:\Program Files\Symantec Client Security\Symantec Client Firewall\SymSPort.exe"><Symantec Corporation>
[Ulead Burning Helper / UleadBurningHelper][Stopped/Auto Start]
  <C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe><N/A>

==================================
Drivers
[Service for Realtek AC97 Audio (WDM) / ALCXWDM][Stopped/Manual Start]
  <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
[AnyDVD / AnyDVD][Running/Manual Start]
  <System32\Drivers\AnyDVD.sys><SlySoft, Inc.>
[AVG Anti-Spyware Driver / AVG Anti-Spyware Driver][Running/System Start]
  <\??\C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys><N/A>
[AVG Anti-Spyware Clean Driver / AvgAsCln][Running/System Start]
  <System32\DRIVERS\AvgAsCln.sys><GRISOFT, s.r.o.>
[Logitech QuickCam Pro 3000(CamDrl) / CamDrL][Running/Manual Start]
  <system32\DRIVERS\Camdrl.sys><Logitech Inc.>
[Creative SBLive! Gameport / ctljystk][Stopped/Manual Start]
  <system32\DRIVERS\ctljystk.sys><Creative Technology Ltd.>
[Intel(R) PRO Network Connection Driver / E100B][Running/Manual Start]
  <system32\DRIVERS\e100b325.sys><Intel Corporation>
[Symantec Eraser Control driver / eeCtrl][Running/System Start]
  <\??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys><Symantec Corporation>
[ElbyCDFL / ElbyCDFL][Running/Manual Start]
  <System32\Drivers\ElbyCDFL.sys><SlySoft, Inc.>
[ElbyCDIO Driver / ElbyCDIO][Running/Auto Start]
  <System32\Drivers\ElbyCDIO.sys><Elaborate Bytes AG>
[ElbyDelay / ElbyDelay][Running/Manual Start]
  <System32\Drivers\ElbyDelay.sys><Elaborate Bytes AG>
[Creative SB Live! (WDM) / emu10k][Stopped/Manual Start]
  <system32\drivers\emu10k1m.sys><Creative Technology Ltd.>
[Creative Interface Manager Driver (WDM) / emu10k1][Stopped/Manual Start]
  <system32\drivers\ctlfacem.sys><Creative Technology Ltd.>
[File Security Kernel Anti-Spyware Driver / ikhfile][Running/System Start]
  <system32\drivers\ikhfile.sys><PCTools Research Pty Ltd.>
[Kernel Anti-Spyware Driver / ikhlayer][Running/System Start]
  <system32\drivers\ikhlayer.sys><PCTools Research Pty Ltd.>
[kX WDM Driver Service / kxwdmdrv][Running/Manual Start]
  <system32\drivers\kx.sys><Eugene Gavrilov>
[Logitech SetPoint Keyboard Driver / L8042Kbd][Stopped/Manual Start]
  <system32\DRIVERS\L8042Kbd.sys><Logitech Inc.>
[SetPoint PS/2 Mouse Filter Driver / L8042mou][Stopped/Manual Start]
  <system32\DRIVERS\L8042mou.Sys><Logitech Inc.>
[SetPoint HID Mouse Filter Driver / LHidKe][Stopped/Manual Start]
  <system32\DRIVERS\LHidKE.Sys><Logitech Inc.>
[SetPoint USB Receiver device driver / LHidUsbK][Stopped/Manual Start]
  <System32\Drivers\LHidUsbK.Sys><Logitech Inc.>
[SetPoint Mouse Filter Driver / LMouKE][Stopped/Manual Start]
  <system32\DRIVERS\LMouKE.Sys><Logitech Inc.>
[Logitech AEC Driver / LVcKap][Stopped/Manual Start]
  <system32\DRIVERS\LVcKap.sys><>
[Logitech Machine Vision Engine Loader / LVMVDrv][Running/Manual Start]
  <system32\DRIVERS\LVMVDrv.sys><Logitech Inc.>
[Logitech LVPr2Mon Driver / LVPr2Mon][Running/Manual Start]
  <system32\DRIVERS\LVPr2Mon.sys><>
[Logitech USB Monitor Filter / LVUSBSta][Running/Manual Start]
  <system32\drivers\LVUSBSta.sys><Logitech Inc.>
[MaVctrl / MaVctrl][Running/Auto Start]
  <system32\DRIVERS\MaVc2K.sys><Mobile Action Technology Inc.>
[NAVENG / NAVENG][Running/Manual Start]
  <\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20070415.003\naveng.sys><Symantec Corporation>
[NAVEX15 / NAVEX15][Running/Manual Start]
  <\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20070415.003\navex15.sys><Symantec Corporation>
[nv / nv][Running/Manual Start]
  <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[Logitech QuickCam Pro 3000(PID_08B1) / PhilCam8116_XP][Stopped/Manual Start]
  <system32\DRIVERS\CamDrL20.sys><Logitech Inc.>
[直接平行连接埠连结驱动程式 / Ptilink][Running/Manual Start]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[PxHelp20 / PxHelp20][Running/Boot Start]
  <\SystemRoot\System32\Drivers\PxHelp20.sys><Sonic Solutions>
[SAVRT / SAVRT][Running/System Start]
  <\??\C:\Program Files\Symantec Client Security\Symantec AntiVirus\savrt.sys><Symantec Corporation>
[SAVRTPEL / SAVRTPEL][Running/System Start]
  <\??\C:\Program Files\Symantec Client Security\Symantec AntiVirus\Savrtpel.sys><Symantec Corporation>
[Secdrv / Secdrv][Stopped/Manual Start]
  <system32\DRIVERS\secdrv.sys><N/A>
[Creative SoundFont Manager Driver (WDM) / sfman][Stopped/Manual Start]
  <system32\drivers\sfmanm.sys><Creative Technology Ltd.>
[SPBBCDrv / SPBBCDrv][Stopped/Manual Start]
  <\??\C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys><Symantec Corporation>
[sptd / sptd][Running/Boot Start]
  <\SystemRoot\System32\Drivers\sptd.sys><N/A>
[SYMDNS / SYMDNS][Running/Manual Start]
  <\SystemRoot\System32\Drivers\SYMDNS.SYS><Symantec Corporation>
[SymEvent / SymEvent][Running/Manual Start]
  <\??\C:\Program Files\Symantec\SYMEVENT.SYS><Symantec Corporation>
[SYMFW / SYMFW][Running/Manual Start]
  <\SystemRoot\System32\Drivers\SYMFW.SYS><Symantec Corporation>
[SYMIDS / SYMIDS][Running/Manual Start]
  <\SystemRoot\System32\Drivers\SYMIDS.SYS><Symantec Corporation>
[SYMIDSCO / SYMIDSCO][Running/Manual Start]
  <\??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\SCFIDS~1\20070411.004\symidsco.sys><Symantec Corporation>
[symlcbrd / symlcbrd][Running/Auto Start]
  <\??\C:\windows\system32\drivers\symlcbrd.sys><Symantec Corporation>
[SYMNDIS / SYMNDIS][Running/Manual Start]
  <\SystemRoot\System32\Drivers\SYMNDIS.SYS><Symantec Corporation>
[SYMREDRV / SYMREDRV][Running/Manual Start]
  <\SystemRoot\System32\Drivers\SYMREDRV.SYS><Symantec Corporation>
[SYMTDI / SYMTDI][Running/System Start]
  <\SystemRoot\System32\Drivers\SYMTDI.SYS><Symantec Corporation>
[ULCDRHlp / ULCDRHlp][Running/Manual Start]
  <System32\Drivers\ULCDRHlp.sys><Ulead Systems, Inc.>
[SHARP GSM GPRS USB Driver 2.0.0 / USBSHGX][Stopped/Manual Start]
  <system32\DRIVERS\usbgx_2.sys><SHARP Corporation.>
[VClone / VClone][Running/Boot Start]
  <\SystemRoot\system32\DRIVERS\VClone.sys><Elaborate Bytes AG>
[VMHybrid service / VMHybrid][Running/Manual Start]
  <system32\DRIVERS\VMHybrid.sys><Compro Technology, Inc.>
[世界标准电传转码器 / WSTCODEC][Stopped/Manual Start]
  <system32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>

==================================
Browser Add-ons
[Adobe PDF Reader Link Helper]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[PCTools Site Guard]
  {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} <C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll, PC Tools>
[SSVHelper Class]
  {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} <C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll, Sun Microsystems, Inc.>
[Windows Live Sign-in Helper]
  {9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, Microsoft Corporation>
[PCTools Browser Monitor]
  {B56A7D7D-6927-48C8-A975-17DF180C71AC} <C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll, PC Tools>
[Windows Live Toolbar Helper]
  {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} <C:\Program Files\Windows Live Toolbar\msntb.dll, Microsoft Corporation>
[NTIECatcher Class]
  {C56CB6B0-0D96-11D6-8C65-B2868B609932} <C:\Program Files\Xi\NetTransport 2\NTIEHelper.dll, Xi>
[Java Plug-in 1.6.0_01]
  {08B0E5C0-4FCB-11CF-AAA5-00401C608501} <C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll, Sun Microsystems, Inc.>
[参考资料(&R)]
  {92780B25-18CC-41C8-B9BE-3C9C571A8263} <C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL, Microsoft Corporation>
[Dr.eye WebPage Translation]
  {92B255FE-94E2-4BCA-958D-3926CE38913F} <C:\Program Files\Inventec\Dreye\DreyeMT\DreyeIEBar.dll, >
[Windows Live Toolbar]
  {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} <C:\Program Files\Windows Live Toolbar\msntb.dll, Microsoft Corporation>
[Windows Genuine Advantage Validation Tool]
  {17492023-C23A-453E-A040-C7C580BBF700} <C:\windows\system32\LegitCheckControl.DLL, Microsoft Corporation>
[WUWebControl Class]
  {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation>
[MUWebControl Class]
  {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} <C:\WINDOWS\system32\muweb.dll, Microsoft Corporation>
[Java Plug-in 1.6.0_01]
  {8AD9C840-044E-11D1-B3E9-00805F499D93} <C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll, Sun Microsystems, Inc.>
[ActiveScan Installer Class]
  {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} <C:\WINDOWS\Downloaded Program Files\asinst.dll, Panda Software>
[a-squared Scanner]
  {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} <C:\WINDOWS\DOWNLO~1\asquared.ocx, Emsi Software GmbH>
[Java Plug-in 1.6.0_01]
  {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll, Sun Microsystems, Inc.>
[Java Plug-in 1.6.0_01]
  {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll, Sun Microsystems, Inc.>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[Adobe PDF Reader Link Helper]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[Web Browser Applet Control]
  {08B0E5C0-4FCB-11CF-AAA5-00401C608501} <C:\WINDOWS\system32\msjava.dll, Microsoft Corporation>
[Windows Genuine Advantage Validation Tool]
  {17492023-C23A-453E-A040-C7C580BBF700} <C:\windows\system32\LegitCheckControl.DLL, Microsoft Corporation>
[PCTools Site Guard]
  {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} <C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll, PC Tools>
[WUWebControl Class]
  {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation>
[Windows Media Player]
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[MUWebControl Class]
  {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} <C:\WINDOWS\system32\muweb.dll, Microsoft Corporation>
[SSVHelper Class]
  {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} <C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll, Sun Microsystems, Inc.>
[Microsoft Web Browser]
  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[Windows Live Sign-in Helper]
  {9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, Microsoft Corporation>
[Dr.eye WebPage Translation]
  {92B255FE-94E2-4BCA-958D-3926CE38913F} <C:\Program Files\Inventec\Dreye\DreyeMT\DreyeIEBar.dll, >
[PCTools Browser Monitor]
  {B56A7D7D-6927-48C8-A975-17DF180C71AC} <C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll, PC Tools>
[Windows Live Toolbar]
  {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} <C:\Program Files\Windows Live Toolbar\msntb.dll, Microsoft Corporation>
[Windows Live Toolbar Helper]
  {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} <C:\Program Files\Windows Live Toolbar\msntb.dll, Microsoft Corporation>
[OWSClientMiscApis Class]
  {BDEADE3F-C265-11D0-BCED-00A0C90AB50F} <C:\PROGRA~1\MICROS~2\OFFICE11\OWSCLT.DLL, Microsoft Corporation>
[OWSBrowserUI Class]
  {BDEADE43-C265-11D0-BCED-00A0C90AB50F} <C:\PROGRA~1\MICROS~2\OFFICE11\OWSCLT.DLL, Microsoft Corporation>
[NTIECatcher Class]
  {C56CB6B0-0D96-11D6-8C65-B2868B609932} <C:\Program Files\Xi\NetTransport 2\NTIEHelper.dll, Xi>
[Adobe PDF Reader]
  {CA8A9780-280D-11CF-A24D-444553540000} <C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroPDF.dll, Adobe Systems, Inc.>
[Windows Live Sign-in Control]
  {D2517915-48CE-4286-970F-921E881B8C5C} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, Microsoft Corporation>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[&Windows Live Search]
  <res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm, N/A>
[Add to Windows &Live Favorites]
  <[url]http://favorites.live.com/quickadd.aspx[/url], N/A>
[使用影音传送带下载]
  <C:\Program Files\Xi\NetTransport 2\NTAddLink.html, N/A>
[使用影音传送带下载全部连结]
  <C:\Program Files\Xi\NetTransport 2\NTAddList.html, N/A>
[汇出至 Microsoft Office Excel(&X)]
  <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
[在新的前景索引标签中开启]
  <res://C:\Program Files\Windows Live Toolbar\Components\zh-tw\msntabres.dll.mui/230?d1d935ca2b6446dfbdcb5e1a85b6943e, N/A>
[在新的背景索引标签中开启]
  <res://C:\Program Files\Windows Live Toolbar\Components\zh-tw\msntabres.dll.mui/229?d1d935ca2b6446dfbdcb5e1a85b6943e, N/A>

==================================
Running Processes
[PID: 716][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 772][\??\C:\windows\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Spyware Doctor\tools\swpg.dat]  [PC Tools, 3.6.0.2080]
[PID: 1872][C:\windows\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Spyware Doctor\tools\swpg.dat]  [PC Tools, 3.6.0.2080]
    [C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll]  [Logitech Inc., 10.5.1.2027]
    [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll]  [N/A, ]
    [C:\Program Files\XemiComputers\Active Desktop Calendar\MouseHook.dll]  [N/A, ]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, ]
    [C:\Program Files\Super Rabbit\magicset\srcd.dll]  [Super Rabbit Software, 1.02.0002]
    [C:\windows\system32\MSVBVM60.DLL]  [Microsoft Corporation, 6.00.9782]
    [C:\windows\system32\vb6cht.dll]  [Microsoft Corporation, 6.00.8988]
    [C:\Program Files\Common Files\Symantec Shared\SSC\vpshell2.dll]  [Symantec Corporation, 10.0.0.359]
    [C:\windows\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.6030.0]
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll]  [Adobe Systems, Inc., 7.0.0.0]
    [C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll]  [Anti-Malware Development a.s., 7, 5, 0, 47]
    [C:\windows\system32\nvcpl.dll]  [NVIDIA Corporation, 6.14.10.6693]
    [C:\windows\system32\NVRSZHT.DLL]  [NVIDIA Corporation, 6.14.10.6693]
    [C:\windows\system32\CpDTVMen.dll]  [Compro Tech., 1, 0, 0, 3]
    [C:\windows\system32\nvshell.dll]  [NVIDIA Corporation, 6.14.10.6693]
    [C:\windows\system32\CHEWING.IME]  [, 0, 3, 2, 2]
    [C:\WINDOWS\system32\msdmo.dll]  [, ]
    [C:\windows\system32\icm32.dll]  [Microsoft Corporation, 5.1.2600.2709 (xpsp_sp2_gdr.050628-1518)]
    [C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\context.dll]  [Anti-Malware Development a.s., 7, 5, 0, 49]
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll]  [Adobe Systems Incorporated, 7.0.9.2006121800]
    [C:\Program Files\Xi\NetTransport 2\NTIEHelper.dll]  [Xi, 1.91.12]
    [C:\Program Files\Xi\NetTransport 2\MFC42.DLL]  [Microsoft Corporation, 6.00.9782.0]
[PID: 2828][C:\Program Files\Common Files\Symantec Shared\ccApp.exe]  [Symantec Corporation, 103.5.1.9]
    [C:\windows\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.6030.0]
    [C:\windows\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.6030.0]
    [C:\Program Files\Common Files\Symantec Shared\ccL35.dll]  [Symantec Corporation, 103.5.1.9]
    [C:\Program Files\Spyware Doctor\tools\swpg.dat]  [PC Tools, 3.6.0.2080]
    [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  [Symantec Corporation, 103.5.1.9]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\CCALERT.DLL]  [Symantec Corporation, 103.5.1.9]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\CCEMLPXY.DLL]  [Symantec Corporation, 103.5.1.9]
    [C:\PROGRA~1\SYMANT~1\SYMANT~1\NISPROD.DLL]  [Symantec Corporation, 8.6.0.80]
    [C:\PROGRA~1\SYMANT~1\SYMANT~1\NISRES.DLL]  [Symantec Corporation, 8.6.0.80]
    [C:\windows\system32\SYMREDIR.DLL]  [Symantec Corporation, 5.5.1.6]
    [C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll]  [Symantec Corporation, 103.5.1.9]
    [C:\PROGRA~1\SYMANT~1\SYMANT~1\NISTRAY.DLL]  [Symantec Corporation, 8.6.0.80]
    [C:\PROGRA~1\SYMANT~1\SYMANT~1\NISALERT.DLL]  [Symantec Corporation, 8.6.0.80]
    [C:\windows\system32\SymNeti.DLL]  [Symantec Corporation, 5.5.1.6]
    [C:\Program Files\Common Files\Symantec Shared\ccSet.dll]  [Symantec Corporation, 103.5.1.9]
    [C:\Program Files\Common Files\Symantec Shared\ccProSub.dll]  [Symantec Corporation, 103.5.1.9]
    [C:\Program Files\Common Files\Symantec Shared\ccLogin.dll]  [Symantec Corporation, 103.5.1.9]
    [C:\Program Files\Symantec Client Security\Symantec Client Firewall\ccEmlflt.dll]  [Symantec Corporation, 103.5.1.9]
    [C:\Program Files\Symantec Client Security\Symantec Client Firewall\NISLCOM.dll]  [Symantec Corporation, 8.6.0.80]
    [C:\Program Files\Common Files\Symantec Shared\ccPxyEvt.dll]  [Symantec Corporation, 103.5.1.9]
    [C:\Program Files\Symantec Client Security\Symantec AntiVirus\SavEmail.dll]  [Symantec Corporation, 10.0.0.359]
    [C:\Program Files\XemiComputers\Active Desktop Calendar\MouseHook.dll]  [N/A, ]
    [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll]  [N/A, ]
    [C:\Program Files\Symantec Client Security\Symantec Client Firewall\SymFWAgt.dll]  [Symantec Corporation, 103.5.1.9]
    [C:\Program Files\Symantec Client Security\Symantec Client Firewall\SFWAlert.dll]  [Symantec Corporation, 8.6.0.80]
    [C:\Program Files\Symantec Client Security\Symantec Client Firewall\ccFWSetg.dll]  [Symantec Corporation, 103.5.1.9]
    [C:\Program Files\Symantec Client Security\Symantec Client Firewall\pRSettg.dll]  [N/A, ]
    [C:\Program Files\Symantec Client Security\Symantec Client Firewall\TLevel.dll]  [Symantec Corporation, 103.5.1.9]
    [C:\Program Files\Symantec Client Security\Symantec AntiVirus\SAVRT32.DLL]  [Symantec Corporation, 9.5.0.44]
[PID: 2904][C:\PROGRA~1\SYMANT~1\SYMANT~2\VPTray.exe]  [Symantec Corporation, 10.0.0.359]
    [C:\windows\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.6030.0]
    [C:\windows\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.6030.0]
    [C:\Program Files\Spyware Doctor\tools\swpg.dat]  [PC Tools, 3.6.0.2080]
    [C:\Program Files\Symantec Client Security\Symantec AntiVirus\SAVRT32.DLL]  [Symantec Corporation, 9.5.0.44]
    [C:\Program Files\Symantec Client Security\Symantec AntiVirus\Cliscan.dll]  [Symantec Corporation, 10.0.0.359]
    [C:\PROGRA~1\SYMANT~1\SYMANT~2\NAVNTUTL.DLL]  [Symantec Corporation, 10.0.0.359]
    [C:\Program Files\Symantec Client Security\Symantec AntiVirus\Cliproxy.dll]  [Symantec Corporation, 10.0.0.359]
    [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll]  [N/A, ]
    [C:\Program Files\XemiComputers\Active Desktop Calendar\MouseHook.dll]  [N/A, ]
    [C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll]  [Anti-Malware Development a.s., 7, 5, 0, 47]
[PID: 3352][C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe]  [Elaborate Bytes AG, 5, 0, 1, 0]
    [C:\windows\system32\ElbyVCD.dll]  [Elaborate Bytes AG, 5, 1, 1, 0]
    [C:\windows\system32\ElbyCDIO.dll]  [Elaborate Bytes AG, 6, 0, 5, 1]
    [C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll]  [Logitech Inc., 10.5.1.2027]
    [C:\Program Files\Spyware Doctor\tools\swpg.dat]  [PC Tools, 3.6.0.2080]
    [C:\Program Files\XemiComputers\Active Desktop Calendar\MouseHook.dll]  [N/A, ]
    [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll]  [N/A, ]
[PID: 3368][C:\Program Files\Inventec\Dreye\DreyeMT\msnplugin.exe]  [, 1, 0, 0, 1]
    [C:\Program Files\Spyware Doctor\tools\swpg.dat]  [PC Tools, 3.6.0.2080]
    [C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll]  [Logitech Inc., 10.5.1.2027]
    [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll]  [N/A, ]
    [C:\Program Files\XemiComputers\Active Desktop Calendar\MouseHook.dll]  [N/A, ]
[PID: 3528][C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe]  [Logitech Inc., 1.4.7.2031]
    [C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll]  [Logitech Inc., 10.5.1.2027]
    [C:\Program Files\Spyware Doctor\tools\swpg.dat]  [PC Tools, 3.6.0.2080]
    [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll]  [N/A, ]
    [C:\Program Files\XemiComputers\Active Desktop Calendar\MouseHook.dll]  [N/A, ]
    [C:\Program Files\Common Files\LogiShrd\LComMgr\DevMngr.dll]  [Logitech Inc., 1.4.7.2031]
    [C:\Program Files\Common Files\LogiShrd\LComMgr\LVMaEnum.dll]  [Logitech Inc., 10.5.1.2027]
    [C:\Program Files\Common Files\LogiShrd\LComMgr\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Common Files\LogiShrd\LComMgr\LVComCX.dll]  [Logitech Inc., 10.5.1.2027]
    [C:\Program Files\Logitech\QuickCam10\EFVal.dll]  [Logitech Inc., 10.5.1.2029]
    [C:\Program Files\Common Files\LogiShrd\LComMgr\BRSkypePlugin.dll]  [Logitech Inc., 1.4.7.2031]
    [C:\Program Files\Common Files\LogiShrd\LComMgr\AolPlugin.dll]  [Logitech Inc., 1.4.7.2031]
    [C:\Program Files\Common Files\LogiShrd\LComMgr\YahooPlugin.dll]  [Logitech Inc., 1.4.7.2031]
    [C:\Program Files\Common Files\LogiShrd\LComMgr\LCMServerPS.dll]  [N/A, ]
[PID: 3572][C:\Program Files\Logitech\QuickCam10\QuickCam10.exe]  [, ]
    [C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll]  [Logitech Inc., 10.5.1.2027]
    [C:\Program Files\Spyware Doctor\tools\swpg.dat]  [PC Tools, 3.6.0.2080]
    [C:\Program Files\Logitech\QuickCam10\LAppRes.dll]  [, ]
    [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll]  [N/A, ]
    [C:\Program Files\Logitech\QuickCam10\LogiMail.dll]  [Logitech Inc., 10.5.1.2029]
    [C:\Program Files\Common Files\LogiShrd\LComMgr\DevMngr.dll]  [Logitech Inc., 1.4.7.2031]
    [C:\Program Files\Common Files\LogiShrd\LComMgr\LVMaEnum.dll]  [Logitech Inc., 10.5.1.2027]
    [C:\Program Files\Common Files\LogiShrd\LComMgr\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Common Files\LogiShrd\LComMgr\LVComCX.dll]  [Logitech Inc., 10.5.1.2027]
    [C:\Program Files\Logitech\QuickCam10\EFVal.dll]  [Logitech Inc., 10.5.1.2029]
    [C:\Program Files\XemiComputers\Active Desktop Calendar\MouseHook.dll]  [N/A, ]
    [C:\Program Files\Common Files\LogiShrd\LComMgr\LCMServerPS.dll]  [N/A, ]
    [C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManagerPS.dll]  [Logitech Inc., 10.5.1.2029]
[PID: 3628][C:\windows\system32\kxmixer.exe]  [Eugene Gavrilov, 5, 10, 00, 3537 - debug]
    [C:\windows\system32\MFC42D.DLL]  [Microsoft Corporation, 6.00.8665.0]
    [C:\windows\system32\MSVCRTD.dll]  [Microsoft Corporation, 6.00.8797.0]
    [C:\windows\system32\kxapi.dll]  [Eugene Gavrilov, 5.10.00.3537 - debug]
    [C:\windows\system32\kxgui.dll]  [Eugene Gavrilov, 5.10.00.3537 - debug]
    [C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll]  [Logitech Inc., 10.5.1.2027]
    [C:\Program Files\Spyware Doctor\tools\swpg.dat]  [PC Tools, 3.6.0.2080]
    [C:\windows\system32\cmax20.dll]  [WinMain Software ([url]http://www.winmain.com[/url]), 2.1.0.15]
    [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll]  [N/A, ]
    [C:\windows\system32\kxfxlib.kxl]  [Eugene Gavrilov, 5.10.00.3537 - debug]
    [C:\Program Files\XemiComputers\Active Desktop Calendar\MouseHook.dll]  [N/A, ]
[PID: 3648][C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe]  [Sun Microsystems, Inc., 6.0.10.6]
    [C:\Program Files\Spyware Doctor\tools\swpg.dat]  [PC Tools, 3.6.0.2080]
    [C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll]  [Logitech Inc., 10.5.1.2027]
    [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll]  [N/A, ]
[PID: 3692][C:\Program Files\Norton Ghost\Agent\GhostTray.exe]  [Symantec Corporation, 10.0.0.8400]
    [C:\Program Files\Spyware Doctor\tools\swpg.dat]  [PC Tools, 3.6.0.2080]
    [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll]  [N/A, ]
    [C:\Program Files\Common Files\Symantec Shared\ccAlert.dll]  [Symantec Corporation, 103.5.1.9]
    [C:\windows\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.6030.0]
    [C:\windows\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.6030.0]
    [C:\Program Files\Common Files\Symantec Shared\ccL35.dll]  [Symantec Corporation, 103.5.1.9]
    [C:\Program Files\Norton Ghost\Shared\VProAuto.dll]  [Symantec Corporation, 10.0.0.8400]
    [C:\Program Files\Norton Ghost\Agent\DrmLicense.DLL]  [Symantec Corporation, 10.0.0.8400]
    [C:\windows\system32\MFC71.DLL]  [Microsoft Corporation, 7.10.6030.0]
    [C:\windows\system32\MFC71CHT.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\XemiComputers\Active Desktop Calendar\MouseHook.dll]  [N/A, ]
[PID: 3704][C:\windows\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll]  [Logitech Inc., 10.5.1.2027]
    [C:\Program Files\Spyware Doctor\tools\swpg.dat]  [PC Tools, 3.6.0.2080]
    [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll]  [N/A, ]
    [C:\Program Files\XemiComputers\Active Desktop Calendar\MouseHook.dll]  [N/A, ]
[PID: 3744][C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe]  [XemiComputers ltd., 4, 3, 1, 0]
    [C:\Program Files\XemiComputers\Active Desktop Calendar\MouseHook.dll]  [N/A, ]
    [C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll]  [Logitech Inc., 10.5.1.2027]
    [C:\Program Files\Spyware Doctor\tools\swpg.dat]  [PC Tools, 3.6.0.2080]
    [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll]  [N/A, ]
[PID: 3840][C:\Program Files\Common Files\VideoMate\ComproRemote.exe]  [Compro Technology, Inc., 2, 0, 3, 6]
    [C:\windows\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.6030.0]
    [C:\windows\system32\MFC71.DLL]  [Microsoft Corporation, 7.10.6030.0]
    [C:\windows\system32\MFC71CHT.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Spyware Doctor\tools\swpg.dat]  [PC Tools, 3.6.0.2080]
    [C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll]  [Logitech Inc., 10.5.1.2027]
    [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll]  [N/A, ]
    [C:\windows\system32\msdmo.dll]  [, ]
    [C:\Program Files\XemiComputers\Active Desktop Calendar\MouseHook.dll]  [N/A, ]
[PID: 3868][C:\Program Files\Common Files\LogiShrd\LComMgr\LVComSX.exe]  [Logitech Inc., 10.5.1.2027]
    [C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll]  [Logitech Inc., 10.5.1.2027]
    [C:\Program Files\Spyware Doctor\tools\swpg.dat]  [PC Tools, 3.6.0.2080]
    [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll]  [N/A, ]
    [C:\Program Files\Common Files\LogiShrd\LComMgr\LVMaEnum.dll]  [Logitech Inc., 10.5.1.2027]
    [C:\Program Files\Common Files\LogiShrd\LComMgr\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Common Files\LogiShrd\LComMgr\LVComCX.dll]  [Logitech Inc., 10.5.1.2027]
    [C:\Program Files\XemiComputers\Active Desktop Calendar\MouseHook.dll]  [N/A, ]
[PID: 400][C:\Program Files\Common Files\VideoMate\ComproSchedulerDTV.exe]  [Compro Technology, Inc., 1, 0, 1, 9]
    [C:\windows\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.6030.0]
    [C:\windows\system32\MFC71.DLL]  [Microsoft Corporation, 7.10.6030.0]
    [C:\windows\system32\MFC71CHT.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll]  [Logitech Inc., 10.5.1.2027]
    [C:\Program Files\Spyware Doctor\tools\swpg.dat]  [PC Tools, 3.6.0.2080]
    [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll]  [N/A, ]
    [C:\Program Files\XemiComputers\Active Desktop Calendar\MouseHook.dll]  [N/A, ]
[PID: 2460][C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe]  [Logitech Inc., 10.5.1.2029]
    [C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll]  [Logitech Inc., 10.5.1.2027]
    [C:\Program Files\Spyware Doctor\tools\swpg.dat]  [PC Tools, 3.6.0.2080]
    [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll]  [N/A, ]
    [C:\Program Files\Common Files\LogiShrd\LComMgr\DevMngr.dll]  [Logitech Inc., 1.4.7.2031]
    [C:\Program Files\XemiComputers\Active Desktop Calendar\MouseHook.dll]  [N/A, ]
    [C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManagerPS.dll]  [Logitech Inc., 10.5.1.2029]
    [C:\Program Files\Common Files\LogiShrd\LComMgr\LVMaEnum.dll]  [Logitech Inc., 10.5.1.2027]
    [C:\Program Files\Common Files\LogiShrd\LComMgr\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Common Files\LogiShrd\LComMgr\LVComCX.dll]  [Logitech Inc., 10.5.1.2027]
    [C:\Program Files\Logitech\QuickCam10\EFVal.dll]  [Logitech Inc., 10.5.1.2029]
[PID: 2880][C:\Program Files\KKman\KKMAN.exe]  [, 1, 0, 0, 1]
    [C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll]  [Logitech Inc., 10.5.1.2027]
    [C:\Program Files\Spyware Doctor\tools\swpg.dat]  [PC Tools, 3.6.0.2080]
    [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll]  [N/A, ]
    [C:\Program Files\XemiComputers\Active Desktop Calendar\MouseHook.dll]  [N/A, ]
    [C:\WINDOWS\Downloaded Program Files\asinst.dll]  [Panda Software, 58, 6, 0, 0]
    [C:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll]  [Sun Microsystems, Inc., 6.0.10.6]
    [C:\WINDOWS\system32\msjava.dll]  [Microsoft Corporation, 5.00.3810]
    [C:\windows\system32\VMHELPER.DLL]  [Microsoft Corporation, 5.00.3810]
    [C:\windows\system32\JIT.DLL]  [Microsoft Corporation, 5.00.3810]
    [C:\windows\system32\javart.dll]  [Microsoft Corporation, 5.00.3810]
    [C:\windows\system32\msawt.dll]  [Microsoft Corporation, 5.00.3810]
    [C:\windows\system32\javacypt.dll]  [Microsoft Corporation, 5.00.3810]
    [C:\windows\system32\mscoree.dll]  [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)]
    [C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dll]  [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)]
    [C:\windows\system32\CHEWING.IME]  [, 0, 3, 2, 2]
    [C:\windows\system32\ACTIVE~1\Psscan.dll]  [Panda Software International, 10, 4, 1, 8]
    [C:\windows\system32\ACTIVE~1\PSKUTIL.dll]  [Panda Software International, 1, 4, 1, 13]
    [C:\windows\system32\ACTIVE~1\PSKVFILE.dll]  [Panda Software International, 1, 4, 1, 3]
    [C:\windows\system32\ACTIVE~1\PSKALLOC.dll]  [Panda Software International, 1, 4, 1, 7]
    [C:\windows\system32\ACTIVE~1\pskvfs.dll]  [Panda Software International, 1, 4, 1, 12]
    [C:\windows\system32\ACTIVE~1\PSKCMP.dll]  [Panda Software International, 1, 4, 1, 40]
    [C:\windows\system32\ACTIVE~1\PSKPACK.DLL]  [Panda Software International, 1, 4, 1, 3]
    [C:\windows\system32\ACTIVE~1\pskvm.dll]  [Panda Software International, 1, 4, 1, 8]
    [C:\windows\system32\ACTIVE~1\PSKHTML.dll]  [Panda Software International, 1, 4, 1, 4]
    [C:\windows\system32\ACTIVE~1\pskscs.dll]  [Panda Software International, 1, 4, 1, 6]
    [C:\windows\system32\ACTIVE~1\pskfss.dll]  [Panda Software International, 1, 4, 1, 10]
    [C:\windows\system32\ACTIVE~1\Rawvfile.dll]  [Panda Software International, 2, 0, 0, 28]
    [C:\windows\system32\ACTIVE~1\pskahk.dll]  [Panda Software International, 1, 4, 2, 114]
    [C:\windows\system32\ACTIVE~1\PreScan.dll]  [Panda Software International, 1, 0, 0, 13]
    [C:\windows\system32\ACTIVE~1\NanoWrapper.dll]  [Panda Software International, 1, 0, 0, 12]
    [C:\windows\system32\ACTIVE~1\PlgGlaukaComm.dll]  [Panda Software International, 1, 0, 1, 900]
    [C:\windows\system32\ACTIVE~1\NanoKernel.dll]  [Panda Software International, 1, 0, 1, 4]
    [C:\windows\system32\ACTIVE~1\XmlParser.dll]  [Panda Software International, 1, 0, 0, 1]
    [C:\windows\system32\ACTIVE~1\PavPEn.dll]  [Panda Software International, 1, 0, 0, 11]
    [C:\windows\system32\ACTIVE~1\plgSIGLoader.dll]  [Panda Software International, 1, 0, 0, 1]
    [C:\windows\system32\ACTIVE~1\Hash.dll]  [Panda Software International, 1, 0, 0, 0]
    [C:\windows\system32\ACTIVE~1\plgexeid.dll]  [Panda Software International, 1, 0, 0, 2]
    [C:\windows\system32\ACTIVE~1\DiskSign.dll]  [Panda Software International, 1, 150, 1, 3]
    [C:\windows\system32\ACTIVE~1\MemorySign.dll]  [Panda Software International, 1, 150, 1, 5]
    [C:\windows\system32\ACTIVE~1\PAvExCom.dll]  [Panda Software International, 3, 3, 4, 0]
    [C:\windows\system32\ACTIVE~1\TCPVfile.dll]  [Panda Software International, 3, 0, 1, 0]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
    [C:\Program Files\Common Files\Microsoft Shared\INK\PENCHT.DLL]  [Microsoft Corporation, 1.0.1038.0]
[PID: 1316][C:\windows\system32\IME\Chewing\ChewingServer.exe]  [N/A, ]
    [C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll]  [Logitech Inc., 10.5.1.2027]
    [C:\Program Files\Spyware Doctor\tools\swpg.dat]  [PC Tools, 3.6.0.2080]
    [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll]  [N/A, ]
    [C:\Program Files\XemiComputers\Active Desktop Calendar\MouseHook.dll]  [N/A, ]
[PID: 3916][C:\Program Files\MSN Messenger\msnmsgr.exe]  [Microsoft Corporation, 8.1.0178.00]
    [C:\Program Files\MSN Messenger\MSIMG32.dll]  [Patchou, 4, 20, 0, 262]
    [C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll]  [Patchou, 4, 20, 0, 262]
    [C:\Program Files\Messenger Plus! Live\Detoured.dll]  [N/A, ]
    [C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll]  [Logitech Inc., 10.5.1.2027]
    [C:\Program Files\Spyware Doctor\tools\swpg.dat]  [PC Tools, 3.6.0.2080]
    [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll]  [N/A, ]
    [C:\Program Files\MSN Messenger\msgsres.dll]  [Microsoft Corporation, 8.1.0178.00]
    [C:\Program Files\Messenger Plus! Live\MsgPlusLiveRes.dll]  [Patchou, 4, 20, 0, 262]
    [C:\Program Files\XemiComputers\Active Desktop Calendar\MouseHook.dll]  [N/A, ]
    [C:\windows\system32\msdmo.dll]  [, ]
    [C:\Program Files\Messenger Plus! Live\MPScripts.dll]  [N/A, ]
    [C:\Program Files\Messenger Plus! Live\libsndfile.dll]  [N/A, ]
    [C:\Program Files\Messenger Plus! Live\lame_enc.dll]  [N/A, ]
    [C:\windows\system32\CHEWING.IME]  [, 0, 3, 2, 2]
[PID: 4888][C:\Documents and Settings\Administrator\My Documents\My Pictures\常用程式\休闲魔兽\Auto.exe]  [suxxuser.narod.ru, 1.0.0.0]
    [C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll]  [Logitech Inc., 10.5.1.2027]
    [C:\Program Files\Spyware Doctor\tools\swpg.dat]  [PC Tools, 3.6.0.2080]
    [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll]  [N/A, ]
    [C:\Program Files\XemiComputers\Active Desktop Calendar\MouseHook.dll]  [N/A, ]
[PID: 1280][C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\JWENEC.exe]  [N/A, ]
    [C:\Program Files\Spyware Doctor\tools\swpg.dat]  [PC Tools, 3.6.0.2080]
    [C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll]  [Logitech Inc., 10.5.1.2027]
[PID: 1032][C:\Program Files\BitComet\BitComet.exe]  [[url]www.BitComet.com[/url], 0.62.]
    [C:\Program Files\BitComet\dbghelp.dll]  [Microsoft Corporation, 6.3.0011.3 (DbgBuild.040120-1256)]
    [C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll]  [Logitech Inc., 10.5.1.2027]
    [C:\Program Files\Spyware Doctor\tools\swpg.dat]  [PC Tools, 3.6.0.2080]
    [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll]  [N/A, ]
    [C:\Program Files\XemiComputers\Active Desktop Calendar\MouseHook.dll]  [N/A, ]
[PID: 2024][C:\Program Files\foobar2000\foobar2000.exe]  [N/A, ]
    [C:\Program Files\foobar2000\utf8api.dll]  [N/A, ]
    [C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll]  [Logitech Inc., 10.5.1.2027]
    [C:\Program Files\Spyware Doctor\tools\swpg.dat]  [PC Tools, 3.6.0.2080]
    [C:\Program Files\foobar2000\components\foo_abx.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_ac3.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_albumlist.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_ape.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_apl.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_burninate.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_cdda.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_centercut.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_clienc.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_codepage_action.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_console.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_convolve.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_cue_ex.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_Delete.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_dirvol.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_diskwriter.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_dsp_continuator.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_dsp_extra.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_dsp_pause.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_dsp_soundtouch.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_dsp_wider.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_dts.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_dumb.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_faac.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_flac.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_freedb.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_gep.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_history.dll]  [ , 0, 8, 0, 1]
    [C:\Program Files\foobar2000\components\foo_id3v2.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_infobox.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_input_std.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_mad.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_massdelete.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_masstag.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_matroska.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_midi.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_monkey.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_ofr.dll]  [N/A, ]
    [C:\Program Files\foobar2000\OptimFROG.dll]  [Florin Ghido, [email]FlorinGhido@yahoo.com[/email], 1.100]
    [C:\Program Files\foobar2000\components\foo_output_std.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_out_dsound_ex.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_out_dsound_ex2.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_out_ks.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_playlistgen.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_pphsresample.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_quicktag.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_read_http.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_rgscan.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_scheduler.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_search_ex.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_shell.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_shn.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_shuffle.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_speex.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_syfm.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_toaster.dll]  [Shane Hird, 0, 1, 6, 0]
    [C:\windows\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.6030.0]
    [C:\Program Files\foobar2000\components\foo_tta.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_uie_albumart.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_uie_albumlist.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_uie_dbexplorer.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_uie_simple_spectrum.dll]  [ , 0, 1, 6, 1]
    [C:\Program Files\foobar2000\components\foo_uie_tabs.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_uie_trackinfo.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_uie_volume.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_ui_columns.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_ui_std.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_unpack.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_utils.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_vis_manager.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_vis_simple_spectrum.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_wavpack.dll]  [N/A, ]
    [C:\Program Files\foobar2000\components\foo_wma.dll]  [, 1.0.9]
    [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll]  [N/A, ]
    [C:\Program Files\XemiComputers\Active Desktop Calendar\MouseHook.dll]  [N/A, ]
    [C:\Program Files\SRENG\GNERS.SCR]  [Smallfrogs Studio, 2.4.12.806]
    [C:\Program Files\Spyware Doctor\tools\swpg.dat]  [PC Tools, 3.6.0.2080]
    [C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll]  [Logitech Inc., 10.5.1.2027]
    [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll]  [N/A, ]
    [C:\Program Files\XemiComputers\Active Desktop Calendar\MouseHook.dll]  [N/A, ]

==================================
File Associations
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock Provider
N/A

==================================
Autorun.Inf
N/A

==================================
HOSTS File
127.0.0.1       localhost
127.0.0.1       bar.baidu.com                   #百度IE搜索
127.0.0.1       3721.com                        #3721
127.0.0.1       3721.net                        #3721
127.0.0.1       cnsmin.3721.com                 #3721
127.0.0.1       cnsmin.3721.net                 #3721
127.0.0.1       download.3721.com               #3721
127.0.0.1       download.3721.net               #3721
127.0.0.1       [url]www.3721.com[/url]                    #3721
127.0.0.1       [url]www.3721.net[/url]                    #3721
127.0.0.1       zwsw.3721.net                   #3721
127.0.0.1       ad4.sina.com.cn                 #sina
127.0.0.1       ad.cn.doubleclick.net           #sina

==================================
API HOOK
Entrypoint Error: FreeLibrary (Dangerous Level: Generic,  Hooked by Module: Dest Addr: 0x5F00002D)

==================================
Hidden Process
N/A

==================================

飘雨没意境，下雪没闲情。蜚短流长～
x0 [4 楼] From：台湾 \| Posted：2007-04-16 22:44 \|

彗星风采

级别: 小人物

x24

▲ ▼

[Net.Tcp Port Sharing Service / NetTcpPortSharing][Stopped/Disabled]
<"C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe"><Microsoft Corporation>
[C:\Program Files\XemiComputers\Active Desktop Calendar\MouseHook.dll] [N/A, ]
[C:\Program Files\Messenger Plus! Live\MPScripts.dll] [N/A, ]
[C:\Program Files\Messenger Plus! Live\libsndfile.dll] [N/A, ]
[C:\Program Files\Messenger Plus! Live\lame_enc.dll] [N/A, ]
[PID: 1280][C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\JWENEC.exe] [N/A, ]

以上的档案请楼主依路径打包上传至免空给我或上传至VT分析看看是否为恶意...
至于登录档的部份楼煮可以下载 Icesword的Registry部分进行删除...
不过在做任何行动之前建一楼主先备份唷...
另外请问楼主您是否有安装foobar2000这种播放程式呢?

[ 此文章被彗星风采在2007-04-17 00:23重新编辑 ]


x1 [5 楼] From：台湾中华电信HINET \| Posted：2007-04-16 23:47 \|

tear

级别: 知名人士

x748

▲ ▼

超感激您的协助

小弟不会用免空耶

但小弟有安装foobar播放程式没错哩

飘雨没意境，下雪没闲情。蜚短流长～
x0 [6 楼] From：台湾 \| Posted：2007-04-17 00:23 \|

彗星风采

级别: 小人物

x24

▲ ▼

先把档案复制在一起然后压缩
到这个网址http://www.send....com/
按浏览选择要上传的档案..
勾选I have read and agree to the terms of service.
按下upload..
完成之后会跳出一个网页
网页中间有Download Link:后面所写的网址给我就可以了....
对了..明天还要上班...可能要明天才能给您答覆了喔!


x1 [7 楼] From：台湾中华电信HINET \| Posted：2007-04-17 00:30 \|

tear

级别: 知名人士

x748

▲ ▼

下面是引用彗星风采于2007-04-17 00:30发表的 :
对了..明天还要上班...可能要明天才能给您答覆了喔!

麻烦您了

http://www.sendspace...e/f2db1k

叨扰您许久阿～真是抱歉呢～感谢您的协助

早点休息唷～晚安搂

飘雨没意境，下雪没闲情。蜚短流长～
x0 [8 楼] From：台湾 \| Posted：2007-04-17 00:32 \|

彗星风采

级别: 小人物

x24

▲

这6个档案经上传至VT的结果..全部都是没有问题的档案...
不过我很好奇的一点是JWENEC.exe这葛档案竟然查不到它的任何资料???
请问楼主知道是什么档案吗?
另外在楼主的SREng报表中并没有发现其他有问题的存在唷!
至于楼主所说的下列部分...木马指向机码
HKEY_LOCAL_MACHINE\SOFTWARE\Tencent
HKEY_LOCAL_MACHINE\SOFTWARE\Tencent\PLATFORM_TYPE_LIST
HKEY_LOCAL_MACHINE\SOFTWARE\Tencent\PLATFORM_TYPE_LIST\1
应该只是残留下来的机码没有删除....
登录档的部份楼煮可以下载 Icesword的Registry部分进行删除...
不过在做任何行动之前建一楼主先备份唷...


x1 [9 楼] From：台湾中华电信 \| Posted：2007-04-17 12:17 \|

<< 1 2 下页 >>

(共 2 页)

Powered by PHPWind v1.3.6 Copyright © 2003-04 PHPWind	Processed in 0.086105 second(s),query:16 Gzip disabled 本站由瀛睿律师事务所担任常年法律顾问 \| 免责声明 \| 本网站已依台湾网站内容分级规定处理 \| 连络我们 \| 访客留言