發新話題
打印

[求助] 我的防毒軟件有一部份不能更新

我的防毒軟件有一部份不能更新

我的防毒軟件有一部份不能更新 上一次中了木馬  但是我的防毒軟件把毒delete左  but 就左這時不能更新  有相給大家   高手教教我    我不能把防毒重裝  有冇其他解決方法?   

TOP

先跑一份SRENG LOG
http://www.avpclub.ddns.info/discuz/thread-6565-1-1.html

有發現問題再跟你說
我的部落格 我的噗浪 我的FaceBook
Folding@home with GPGPU集中討論串,大家一起來努力朝著全球制霸的目標邁進!


TOP

跑左

System Repair Engineer 2.6.12.1018
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 3 (Build 2600) - 管理許可權用戶 - 完整功能

以下內容被選中:
    所有的啟動項目(包括註冊表、開機檔案夾、服務等)
    流覽器載入項
    正在運行的進程(包括進程模組資訊)
    文件關聯
    Winsock 提供者
    Autorun.inf
    HOSTS 文件
    進程特權掃描


啟動專案
註冊表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Component Publisher]
    <BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}><"C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe">  [(Verified)Nero AG]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [(Verified)Microsoft Windows Publisher]
    <ccApp><"C:\Program Files\Common Files\Symantec Shared\ccApp.exe">  [(Verified)Symantec Corporation]
    <CJIMETIPSYNC><C:\Program Files\Common Files\Microsoft Shared\IME\IMTC65\CHANGJIE\CINTLCFG.EXE /CJIMETIPSync>  [(Verified)Microsoft Corporation]
    <PHIMETIPSYNC><C:\Program Files\Common Files\Microsoft Shared\IME\IMTC65\PHONETIC\TINTLCFG.EXE /PHIMETIPSync>  [(Verified)Microsoft Corporation]
    <SysTrayApp><%ProgramFiles%\IDT\WDM\sttray.exe>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <nwiz><nwiz.exe /install>  []
    <NvMediaCenter><RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <TkBellExe><; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot>  [(Verified)"RealNetworks, Inc."]
    <QuickTime Task><; "C:\Program Files\QuickTime\qttask.exe" -atboottime>  [Apple Inc.]
    <AppleSyncNotifier><C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe>  [(Verified)Apple Inc.]
    <iTunesHelper><; "C:\Program Files\iTunes\iTunesHelper.exe">  [(Verified)Apple Inc.]
    <Adobe Reader Speed Launcher><; "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe">  [(Verified)"Adobe Systems, Incorporated"]
    <NeroFilterCheck><; C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe>  [(Verified)Nero AG]
    <SunJavaUpdateSched><; "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe">  [(Verified)"Sun Microsystems, Inc."]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Windows Component Publisher]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    <WPDShServiceObj><C:\WINDOWS\system32\WPDShServiceObj.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}]
    <IE7 Uninstall Stub><C:\WINDOWS\system32\ieudinit.exe>  [(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
    <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
    <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
    <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
    <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
    <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
    <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp.inf,PerUserStub>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
    <Address Book 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [File is missing]

==================================
開機檔案夾
N/A

==================================
服務
[Apple Mobile Device / Apple Mobile Device][Running/Auto Start]
  <"C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe"><Apple Inc.>
[Bonjour 服務 / Bonjour Service][Running/Auto Start]
  <"C:\Program Files\Bonjour\mDNSResponder.exe"><Apple Inc.>
[Symantec Event Manager / ccEvtMgr][Running/Auto Start]
  <"C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon><Symantec Corporation>
[Symantec Settings Manager / ccSetMgr][Running/Auto Start]
  <"C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon><Symantec Corporation>
[Human Interface Device Access / HidServ][Stopped/Disabled]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[iPod 服務 / iPod Service][Running/Manual Start]
  <"C:\Program Files\iPod\bin\iPodService.exe"><Apple Inc.>
[LiveUpdate / LiveUpdate][Stopped/Manual Start]
  <"C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE"><Symantec Corporation>
[NBService / NBService][Stopped/Manual Start]
  <C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe><Nero AG>
[NMIndexingService / NMIndexingService][Running/Manual Start]
  <"C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe"><Nero AG>
[NVIDIA Display Driver Service / NVSvc][Running/Auto Start]
  <C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>
[Symantec Management Client / SmcService][Running/Auto Start]
  <"C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe"><Symantec Corporation>
[Symantec Network Access Control / SNAC][Stopped/Manual Start]
  <"C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE"><Symantec Corporation>
[Audio Service / STacSV][Running/Auto Start]
  <c:\program files\idt\ecsxpv_5762_010208\wdm\STacSV.exe><IDT, Inc.>
[Symantec Endpoint Protection / Symantec AntiVirus][Running/Auto Start]
  <"C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe"><Symantec Corporation>
[Windows Live Setup Service / WLSetupSvc][Stopped/Manual Start]
  <"C:\Program Files\Windows Live\installer\WLSetupSvc.exe"><Microsoft Corporation>

==================================
驅動程式
[AMD HwPState Processor Driver / AmdPPM][Running/System Start]
  <system32\DRIVERS\AmdPPM.sys><Advanced Micro Devices>
[COH_Mon / COH_Mon][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\Drivers\COH_Mon.sys><Symantec Corporation>
[Symantec Eraser Control driver / eeCtrl][Running/System Start]
  <\??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys><Symantec Corporation>
[EraserUtilRebootDrv / EraserUtilRebootDrv][Running/Manual Start]
  <\??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys><Symantec Corporation>
[GEAR ASPI Filter Driver / GEARAspiWDM][Stopped/Manual Start]
  <System32\Drivers\GEARAspiWDM.sys><GEAR Software Inc.>
[Microsoft UAA Bus Driver for High Definition Audio / HDAudBus][Running/Manual Start]
  <system32\DRIVERS\HDAudBus.sys><Windows (R) Server 2003 DDK provider>
[IPvE Adapter Driver / IPvE][Running/Manual Start]
  <system32\DRIVERS\IPvE.sys><Hongtien>
[NAVENG / NAVENG][Running/Manual Start]
  <\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080923.040\NAVENG.SYS><Symantec Corporation>
[NAVEX15 / NAVEX15][Running/Manual Start]
  <\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080923.040\NAVEX15.SYS><Symantec Corporation>
[nv / nv][Running/Manual Start]
  <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[NVIDIA nForce Networking Controller Driver / NVENETFD][Running/Manual Start]
  <system32\DRIVERS\NVENETFD.sys><NVIDIA Corporation>
[Service for NVIDIA High Definition Audio Driver / NVHDA][Running/Manual Start]
  <system32\drivers\nvhda32.sys><NVIDIA Corporation>
[NVIDIA Network Bus Enumerator / nvnetbus][Running/Manual Start]
  <system32\DRIVERS\nvnetbus.sys><NVIDIA Corporation>
[nvsmu / nvsmu][Running/Manual Start]
  <system32\DRIVERS\nvsmu.sys><NVIDIA Corporation>
[直接平行連接埠連結驅動程式 / Ptilink][Running/Manual Start]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Secdrv / Secdrv][Stopped/Manual Start]
  <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
[SPBBCDrv / SPBBCDrv][Running/System Start]
  <\??\C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys><Symantec Corporation>
[SRTSP / SRTSP][Running/System Start]
  <System32\Drivers\SRTSP.SYS><Symantec Corporation>
[SRTSPL / SRTSPL][Stopped/Manual Start]
  <System32\Drivers\SRTSPL.SYS><Symantec Corporation>
[SRTSPX / SRTSPX][Running/System Start]
  <System32\Drivers\SRTSPX.SYS><Symantec Corporation>
[IDT High Definition Audio CODEC / STHDA][Running/Manual Start]
  <system32\drivers\sthda.sys><IDT, Inc.>
[SymEvent / SymEvent][Running/Manual Start]
  <\??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS><Symantec Corporation>
[SYMREDRV / SYMREDRV][Running/Manual Start]
  <\SystemRoot\System32\Drivers\SYMREDRV.SYS><Symantec Corporation>
[SYMTDI / SYMTDI][Running/System Start]
  <\SystemRoot\System32\Drivers\SYMTDI.SYS><Symantec Corporation>
[SysPlant for NT / SysPlant][Running/Boot Start]
  <\SystemRoot\SYSTEM32\Drivers\SysPlant.sys><Symantec Corporation>
[Teefer2 Miniport / Teefer2][Running/Manual Start]
  <system32\DRIVERS\teefer2.sys><Symantec Corporation>
[Apple Mobile USB Driver / USBAAPL][Stopped/Manual Start]
  <System32\Drivers\usbaapl.sys><Apple, Inc.>
[WPS / WPS][Running/System Start]
  <\??\C:\WINDOWS\system32\drivers\wpsdrvnt.sys><Symantec Corporation>
[WpsHelper / WpsHelper][Running/Manual Start]
  <\??\C:\WINDOWS\system32\drivers\WpsHelper.sys><Symantec Corporation>

==================================
流覽器載入項
[Adobe PDF Reader Link Helper]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll, (Signed) Adobe Systems Incorporated>
[SSVHelper Class]
  {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} <C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll, (Signed) Sun Microsystems, Inc.>
[]
  {7E853D72-626A-48EC-A868-BA8D5E23E045} <, >
[Windows Live 登入小幫手]
  {9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, (Signed) Microsoft Corporation>
[Java Plug-in 1.6.0_06]
  {08B0E5C0-4FCB-11CF-AAA5-00401C608501} <C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll, (Signed) Sun Microsystems, Inc.>
[參考資料(&R)]
  {92780B25-18CC-41C8-B9BE-3C9C571A8263} <C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL, (Signed) Microsoft Corporation>
[]
  {e2e2dd38-d088-4134-82b7-f2ba38496583} <%windir%\Network Diagnostic\xpnetdiag.exe, (Signed) N/A>
[Messenger]
  {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, (Signed) Microsoft Corporation>
[TRLuncherROC Control]
  {05BCE06B-A300-4C4E-A42F-4C04BCCDE63B} <C:\WINDOWS\DOWNLO~1\TRLUNC~1.OCX, Nowcom>
[Symantec AntiVirus scanner]
  {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} <C:\WINDOWS\Downloaded Program Files\avsniff.dll, (Signed) Symantec Corporation>
[WUWebControl Class]
  {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, (Signed) Microsoft Corporation>
[Symantec RuFSI Utility Class]
  {644E432F-49D3-41A1-8DD5-E099162EEEC5} <C:\WINDOWS\Downloaded Program Files\rufsi.dll, (Signed) Symantec Corporation>
[Java Plug-in 1.6.0_06]
  {8AD9C840-044E-11D1-B3E9-00805F499D93} <C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll, (Signed) Sun Microsystems, Inc.>
[]
  {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} <, >
[Java Plug-in 1.6.0_06]
  {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll, (Signed) Sun Microsystems, Inc.>
[Java Plug-in 1.6.0_06]
  {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.6.0_06\bin\npjpi160_06.dll, (Signed) Sun Microsystems, Inc.>
[TRLuncherROC Control]
  {05BCE06B-A300-4C4E-A42F-4C04BCCDE63B} <C:\WINDOWS\DOWNLO~1\TRLUNC~1.OCX, Nowcom>
[Adobe PDF Reader Link Helper]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll, (Signed) Adobe Systems Incorporated>
[]
  {08B0E5C0-4FCB-11CF-AAA5-00401C608501} <, >
[]
  {0CCA191D-13A6-4E29-B746-314DEE697D83} <, >
[InformationCardSigninHelper Class]
  {19916E01-B44E-4E31-94A4-4696DF46157B} <C:\WINDOWS\system32\icardie.dll, (Signed) Microsoft Corporation>
[Windows Media Player]
  {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, (Signed) Microsoft Corporation>
[XML DOM Document]
  {2933BF90-7B36-11D2-B20E-00C04F983E60} <%SystemRoot%\system32\msxml3.dll, (Signed) N/A>
[Symantec AntiVirus scanner]
  {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} <C:\WINDOWS\Downloaded Program Files\avsniff.dll, (Signed) Symantec Corporation>
[passport 可用指令檔的服務]
  {2D2307C8-7DB4-40D6-9100-D52AF4F97A5B} <%SystemRoot%\system32\netplwiz.dll, (Signed) N/A>
[DHTML Edit Control Safe for Scripting for IE5]
  {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, (Signed) Microsoft Corporation>
[]
  {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} <, >
[RealPlayer RAM Download Handler]
  {2F542A2E-EDC9-4BF7-8CB1-87C9919F7F93} <C:\WINDOWS\system32\rmoc3260.dll, N/A>
[QuickTime Object]
  {4063BE15-3B08-470D-A0D5-B37161CFFD69} <C:\Program Files\QuickTime\QTPlugin.ocx, (Signed) Apple Inc.>
[XML Document]
  {48123BC4-99D9-11D1-A6B3-00C04FD91555} <%SystemRoot%\system32\msxml3.dll, (Signed) N/A>
[Microsoft Terminal Services Client Control (redist)]
  {4eb89ff4-7f78-4a0f-8b8d-2bf02e94e4b2} <%systemroot%\system32\mstscax.dll, (Signed) N/A>
[Microsoft Terminal Services Client Control (redist)]
  {4EDCB26C-D24C-4e72-AF07-B576699AC0DE} <%systemroot%\system32\mstscax.dll, (Signed) N/A>
[]
  {4F1E5B1A-2A80-42CA-8532-2D05CB959537} <, >
[Shell Name Space]
  {55136805-B2DE-11D1-B9F2-00A0C98BC547} <C:\WINDOWS\system32\ieframe.dll, (Signed) Microsoft Corporation>
[Symantec RuFSI Utility Class]
  {644E432F-49D3-41A1-8DD5-E099162EEEC5} <C:\WINDOWS\Downloaded Program Files\rufsi.dll, (Signed) Symantec Corporation>
[Windows Media Player]
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
[Microsoft Terminal Services Client Control (redist)]
  {7390f3d8-0439-4c05-91e3-cf5cb290c3d0} <%systemroot%\system32\mstscax.dll, (Signed) N/A>
[Microsoft Terminal Services Client Control (redist)]
  {7584c670-2274-4efb-b00b-d6aaba6d3850} <%systemroot%\system32\mstscax.dll, (Signed) N/A>
[SSVHelper Class]
  {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} <C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll, (Signed) Sun Microsystems, Inc.>
[]
  {7E853D72-626A-48EC-A868-BA8D5E23E045} <, >
[Microsoft Web Browser]
  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\ieframe.dll, (Signed) Microsoft Corporation>
[XML DOM Document 4.0]
  {88D969C0-F192-11D4-A65F-0040963251E5} <C:\WINDOWS\system32\msxml4.dll, Microsoft Corporation>
[XML HTTP 4.0]
  {88D969C5-F192-11D4-A65F-0040963251E5} <C:\WINDOWS\system32\msxml4.dll, Microsoft Corporation>
[XML DOM Document 5.0]
  {88D969E5-F192-11D4-A65F-0040963251E5} <C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSXML5.DLL, Microsoft Corporation>
[XML DOM Document 6.0]
  {88D96A05-F192-11D4-A65F-0040963251E5} <C:\WINDOWS\system32\msxml6.dll, (Signed) Microsoft Corporation>
[]
  {8DE6AB9C-8C62-486B-8C06-5C9AD6FD06F1} <, >
[Windows Live 登入小幫手]
  {9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, (Signed) Microsoft Corporation>
[Microsoft Terminal Services Client Control (redist)]
  {9059f30f-4eb1-4bd2-9fdc-36f43a218f4a} <%systemroot%\system32\mstscax.dll, (Signed) N/A>
[]
  {92780B25-18CC-41C8-B9BE-3C9C571A8263} <, >
[RMGetLicense Class]
  {A9FC132B-096D-460B-B7D5-1DB0FAE0C062} <C:\WINDOWS\system32\msnetobj.dll, (Signed) Microsoft Corporation>
[Adobe PDF Reader]
  {CA8A9780-280D-11CF-A24D-444553540000} <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.dll, (Signed) Adobe Systems, Inc.>
[AUDIO__X_MS_WMA Moniker Class]
  {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
[VIDEO__X_MS_ASF Moniker Class]
  {CD3AFA8F-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
[Msxml]
  {CFC399AF-D876-11D0-9C10-00C04FC99C8E} <%SystemRoot%\system32\msxml3.dll, (Signed) N/A>
[RealPlayer G2 Control]
  {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, N/A>
[Windows Live 登入控制項]
  {D2517915-48CE-4286-970F-921E881B8C5C} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, (Signed) Microsoft Corporation>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx, (Signed) Adobe Systems, Inc.>
[]
  {D6E814A0-E0C5-11D4-8D29-0050BA6940E3} <, >
[iTunesDetector Class]
  {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} <C:\Program Files\iTunes\ITDetector.ocx, (Signed) Apple Inc.>
[QuickTimeCheck Class]
  {DE4AF3B0-F4D4-11D3-B41A-0050DA2E6C21} <C:\Program Files\QuickTime\QTSystem\QuickTimeCheck.ocx, (Signed) Apple Inc.>
[]
  {E1771B7F-98BE-407F-BA67-AA16ADA5D0C5} <C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGSC8~1.DLL, (Signed) Microsoft Corporation>
[]
  {E2E2DD38-D088-4134-82B7-F2BA38496583} <, >
[XML HTTP Request]
  {ED8C108E-4349-11D2-91A4-00C04F7969E8} <%SystemRoot%\system32\msxml3.dll, (Signed) N/A>
[]
  {F156768E-81EF-470C-9057-481BA8380DBA} <, >
[XML DOM Document 3.0]
  {F5078F32-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\system32\msxml3.dll, (Signed) N/A>
[XML HTTP 3.0]
  {F5078F35-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\system32\msxml3.dll, (Signed) N/A>
[XML DOM Document]
  {F6D90F11-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\system32\msxml3.dll, (Signed) N/A>
[XML HTTP]
  {F6D90F16-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\system32\msxml3.dll, (Signed) N/A>
[]
  {F90D830D-C175-4bbe-82C7-FF94669A4C42} <, >
[]
  {FB5DA724-162B-11D3-8B9B-AA70B4B0B524} <, >
[]
  {FB5F1910-F110-11D2-BB9E-00C04F795683} <, >
[Foxy 下載]
  <res://C:\Program Files\Foxy\Foxy.exe/download.htm, N/A>
[Foxy 搜尋]
  <res://C:\Program Files\Foxy\Foxy.exe/search.htm, N/A>
[設為 Messenger Live 頭像]
  <\SetMSNDP.htm, N/A>

==================================
正在運行的進程
[PID: 1112 / SYSTEM][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 1160 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 1184 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\SnacNp.dll]  [Symantec Corporation, 11.0.2000.151]
[PID: 1228 / SYSTEM][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
[PID: 1240 / SYSTEM][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
[PID: 1408 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
[PID: 1456 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Inc., 1,0,5,11]
[PID: 1664 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\SymRasMan.dll]  [Symantec Corporation, 11.0.2000.151]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\RasSymEap.dll]  [Symantec Corporation, 11.0.2000.151]
[PID: 1808 / SYSTEM][C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe]  [Symantec Corporation, 11.0.2000.1231]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\Trident.dll]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\SyLog.dll]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\SyLink.dll]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\DataMan.dll]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\tse.dll]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\PSSensor.dll]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\SSSensor.dll]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\SpNet.dll]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\NacManager.plg]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\IdsTrafficPipe.dll]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\wpsman.dll]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\tfman.dll]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\SgHI.dll]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\Netport.dll]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Common Files\Symantec Shared\ccL608.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SmcRes.dll]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\AVMan.plg]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\devman.plg]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\GUProxy.plg]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\LuMan.plg]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\sfman.plg]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\AvManRes.dll]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\AvPluginImpl.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\GUProxyRes.dll]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\LUManRes.dll]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SfManRes.dll]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\DevManRes.dll]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SgHIRes.dll]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.6030.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.6030.0]
    [C:\Program Files\Common Files\Symantec Shared\ccL60U.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\WGXMAN.DLL]  [Symantec Corporation, 11.0.2000.151]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SpNetRes.dll]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\TseRes.dll]  [Symantec Corporation, 11.0.2000.1231]
[PID: 1920 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
[PID: 180 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
[PID: 288 / SYSTEM][C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe]  [Symantec Corporation, 106.3.6.9]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.6030.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.6030.0]
    [C:\Program Files\Common Files\Symantec Shared\ccL60U.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\Program Files\Common Files\Symantec Shared\ccSvc.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\Program Files\Common Files\Symantec Shared\ccSet.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\CCSETPLG.DLL]  [Symantec Corporation, 106.3.6.9]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\SAVSUB~1\SUBENG.DLL]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SUBRES.loc]  [Symantec Corporation, 11.0.2000.1253]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\SNDSVC.DLL]  [Symantec Corporation, 7.2.1.110]
    [C:\Program Files\Common Files\Symantec Shared\ccL60.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\CCEVTPLG.DLL]  [Symantec Corporation, 106.3.6.9]
    [C:\Program Files\Common Files\Symantec Shared\ccEvtCli.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\SPBBC\SPBBCEVT.DLL]  [Symantec Corporation, 3.3.6.8]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\SRTSP\SRTSP32.DLL]  [Symantec Corporation, 10.2.4.3]
    [C:\Program Files\Common Files\Symantec Shared\ccProSub.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\CCSETEVT.DLL]  [Symantec Corporation, 106.3.6.9]
    [C:\WINDOWS\system32\ATL71.DLL]  [Microsoft Corporation, 7.10.5057.0]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\SAVSUB~1\SubConn.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\SAVSubmitter.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SAVSubmitterRes.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Common Files\Symantec Shared\SPBBC\bbRGen.dll]  [Symantec Corporation, 3.3.6.8]
[PID: 716 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852)]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Inc., 1,0,5,11]
[PID: 1096 / Administrator][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\SnacNp.dll]  [Symantec Corporation, 11.0.2000.151]
[PID: 1712 / Administrator][C:\Program Files\Common Files\Symantec Shared\ccApp.exe]  [Symantec Corporation, 106.3.6.9]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.6030.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.6030.0]
    [C:\Program Files\Common Files\Symantec Shared\ccL60U.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\WINDOWS\system32\SymNeti.dll]  [Symantec Corporation, 7.2.1.110]
    [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\Program Files\Common Files\Symantec Shared\ccSvc.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\Program Files\Common Files\Symantec Shared\ccSet.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\CCALERT.DLL]  [Symantec Corporation, 106.3.6.9]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\CCEMLPXY.DLL]  [Symantec Corporation, 106.3.6.9]
    [C:\PROGRA~1\SYMANTEC\SYMANT~1\SAVSES~1.DLL]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Common Files\Symantec Shared\COH\sesHlp.dll]  [Symantec Corporation, 6.1.7.18]
    [C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\WINDOWS\system32\ATL71.DLL]  [Microsoft Corporation, 7.10.5057.0]
    [C:\Program Files\Common Files\Symantec Shared\COH\sH0007.dll]  [Symantec Corporation, 6,1,7,18]
    [C:\Program Files\Common Files\Symantec Shared\ccProSub.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\ccEvtCli.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\rcEmlPxy.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\WINDOWS\system32\SymRedir.dll]  [Symantec Corporation, 7.2.1.110]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\SavEmail.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Common Files\Symantec Shared\SRTSP\SRTSP32.DLL]  [Symantec Corporation, 10.2.4.3]
[PID: 1972 / Administrator][C:\Program Files\IDT\WDM\sttray.exe]  [IDT, Inc., 1.0.5762.0  nd648 cp1]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\IDT\WDM\STLang.dll]  [IDT, Inc., 1.0.5762.0  nd648 cp1]
    [C:\WINDOWS\system32\stacapi.dll]  [IDT, Inc., 1.0.5762.0  nd648 cp1]
[PID: 2044 / SYSTEM][C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe]  [Apple Inc., 2.10.31.0]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
[PID: 284 / Administrator][C:\WINDOWS\system32\RUNDLL32.EXE]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
    [C:\WINDOWS\system32\NvMcTray.dll]  [NVIDIA Corporation, 6.14.11.7474]
    [C:\WINDOWS\system32\nvapi.dll]  [NVIDIA Corporation, 6.14.11.7474]
    [C:\WINDOWS\system32\NVRSZHT.DLL]  [NVIDIA Corporation, 6.14.11.7474]
[PID: 304 / Administrator][C:\Program Files\Common Files\Real\Update_OB\realsched.exe]  [RealNetworks, Inc., 0.1.0.4279]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
[PID: 324 / SYSTEM][C:\Program Files\Bonjour\mDNSResponder.exe]  [Apple Inc., 1,0,5,11]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
[PID: 480 / Administrator][C:\Program Files\iTunes\iTunesHelper.exe]  [Apple Inc., 8.0.0.35]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\iTunes\iTunesHelper.Resources\zh_TW.lproj\iTunesHelperLocalized.DLL]  [Apple Inc., 8.0.0.26]
    [C:\Program Files\iTunes\iTunesHelper.Resources\iTunesHelper.DLL]  [Apple Inc., 8.0.0.35]
    [C:\Program Files\QuickTime\QTSystem\QuickTime.qts]  [Apple Inc., 7.5.5 (990.7)]
    [C:\Program Files\Common Files\Apple\Mobile Device Support\bin\iTunesMobileDevice.dll]  [Apple Inc., 185.2.0.4]
[PID: 520 / Administrator][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
[PID: 596 / SYSTEM][C:\WINDOWS\system32\nvsvc32.exe]  [NVIDIA Corporation, 6.14.11.7474]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
    [C:\WINDOWS\system32\nvapi.dll]  [NVIDIA Corporation, 6.14.11.7474]
[PID: 604 / Administrator][C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe]  [Nero AG, 2,0,16,0]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Common Files\Ahead\Lib\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Common Files\Ahead\Lib\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\Common Files\Ahead\Lib\AdvrCntr2.dll]  [Nero AG, 10,1,3, 10900]
    [C:\Program Files\Common Files\Ahead\Lib\NMIndexingServicePS.dll]  [Nero AG, 2,0,16,0]
    [C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvrPS.dll]  [Nero AG, 2,0,16,0]
    [C:\Program Files\Common Files\Ahead\Lib\NMDataServices.dll]  [Nero AG, 2,0,16,0]
[PID: 864 / SYSTEM][c:\program files\idt\ecsxpv_5762_010208\wdm\STacSV.exe]  [IDT, Inc., 1.0.5762.0  nd648 cp1]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
    [C:\WINDOWS\system32\stacapi.dll]  [IDT, Inc., 1.0.5762.0  nd648 cp1]
[PID: 2104 / SYSTEM][C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe]  [Symantec Corporation, 11.0.2000.1253]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
    [C:\WINDOWS\system32\CBA.DLL]  [LANDesk Software Ltd., 6.12.0.148 E]
    [C:\WINDOWS\system32\MsgSys.dll]  [LANDesk Software Ltd., 6.12.0.148 E]
    [C:\WINDOWS\system32\NTS.dll]  [LANDesk Software Ltd., 6.12.0.148 E]
    [C:\WINDOWS\system32\PDS.DLL]  [LANDesk Software Ltd., 6.12.0.148 E]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\I2ldvp3.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Common Files\Symantec Shared\ccL608.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\ActaRes.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\PScanRes.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\NAVNTUTL.DLL]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\RTVScanPS.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\ScsComms_VC8.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.6030.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.6030.0]
    [C:\Program Files\Common Files\Symantec Shared\SRTSP\SRTSP32.DLL]  [Symantec Corporation, 10.2.4.3]
    [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\Program Files\Common Files\Symantec Shared\ccL60U.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\Program Files\Common Files\Symantec Shared\ccProSub.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\ccEvtCli.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\Program Files\Common Files\Symantec Shared\Global Exceptions\GEDataStore.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Common Files\Symantec Shared\dec_abi.dll]  [Symantec Corporation, 1.1.1.39]
    [C:\Program Files\Common Files\Symantec Shared\ccScanw.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\Program Files\Common Files\Symantec Shared\ecmldr32.DLL]  [Symantec Corporation, 61.3.0.17]
    [C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Inc., 1,0,5,11]
    [C:\Program Files\Common Files\Symantec Shared\MSL\msl.dll]  [Symantec Corporation, 5.1.0001.0000]
    [C:\Program Files\Common Files\Symantec Shared\ccSvc.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\IMail.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\IMailRes.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\SymProtectStorage.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCEvt.dll]  [Symantec Corporation, 3.3.6.8]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080923.040\ccEraser.dll]  [Symantec Corporation, 108.2.3.4]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080923.040\ecmsvr32.dll]  [Symantec Corporation, 81.2.0.25]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080923.040\NAVEX32a.DLL]  [Symantec Corporation, 20081.2.0.36]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080923.040\NAVENG32.DLL]  [Symantec Corporation, 20081.2.0.36]
[PID: 2612 / SYSTEM][C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe]  [Nero AG, 2,0,16,0]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Common Files\Ahead\Lib\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Common Files\Ahead\Lib\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\Common Files\Ahead\Lib\NMIndexingServicePS.dll]  [Nero AG, 2,0,16,0]
    [C:\Program Files\Common Files\Ahead\Lib\NMLogCxx.dll]  [Nero AG, 2,0,16,0]
    [C:\Program Files\Common Files\Ahead\Lib\log4cxx.dll]  [Nero AG, 1, 0, 0, 0]
    [C:\Program Files\Common Files\Ahead\Lib\NMDataServices.dll]  [Nero AG, 2,0,16,0]
[PID: 2616 / Administrator][C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe]  [Symantec Corporation, 11.0.2000.1231]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\DataMan.dll]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\SyLog.dll]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\SpNet.dll]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\NacManager.plg]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Common Files\Symantec Shared\ccL608.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SmcGuiRes.dll]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SpNetRes.dll]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\RTVScanPS.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\devman.plg]  [Symantec Corporation, 11.0.2000.1231]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.6030.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.6030.0]
    [C:\Program Files\Common Files\Symantec Shared\ccL60U.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\WINDOWS\system32\ATL71.DLL]  [Microsoft Corporation, 7.10.5057.0]
    [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\Program Files\Common Files\Symantec Shared\ccProSub.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\ccEvtCli.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\Program Files\Common Files\Symantec Shared\ccSvc.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\Program Files\Common Files\Symantec Shared\ccAlert.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\Program Files\Common Files\Symantec Shared\ccSet.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\Cliproxy.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\ActaRes.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\PScanRes.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\NAVNTUTL.DLL]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\ProtectionUtil.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Common Files\Symantec Shared\ccL60U8.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\ProtectionUtilRes.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\ProtectionProviderPS.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\SavMainUI.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SavMainUIRes.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCEvt.dll]  [Symantec Corporation, 3.3.6.8]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\ScsComms_VC8.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\HPPProtectionProviderUI.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\HPPProtectionproviderUIRes.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\WINDOWS\system32\nts.dll]  [LANDesk Software Ltd., 6.12.0.148 E]
    [C:\WINDOWS\system32\cba.dll]  [LANDesk Software Ltd., 6.12.0.148 E]
    [C:\WINDOWS\system32\MsgSys.dll]  [LANDesk Software Ltd., 6.12.0.148 E]
    [C:\WINDOWS\system32\PDS.DLL]  [LANDesk Software Ltd., 6.12.0.148 E]
    [C:\Program Files\Common Files\Symantec Shared\SRTSP\SRTSP32.DLL]  [Symantec Corporation, 10.2.4.3]
[PID: 3040 / SYSTEM][C:\Program Files\iPod\bin\iPodService.exe]  [Apple Inc., 8.0.0.35]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\iPod\bin\iPodService.Resources\zh_TW.lproj\iPodServiceLocalized.DLL]  [Apple Inc., 8.0.0.26]
    [C:\Program Files\iPod\bin\iPodService.Resources\iPodService.DLL]  [Apple Inc., 8.0.0.35]
[PID: 3048 / Administrator][C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe]  [Nero AG, 2,0,16,0]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Common Files\Ahead\Lib\NMSQLDB.dll]  [Nero AG, 2,0,16,0]
    [C:\Program Files\Common Files\Ahead\Lib\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Common Files\Ahead\Lib\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\Common Files\Ahead\Lib\NMLogCxx.dll]  [Nero AG, 2,0,16,0]
    [C:\Program Files\Common Files\Ahead\Lib\log4cxx.dll]  [Nero AG, 1, 0, 0, 0]
    [C:\Program Files\Common Files\Ahead\Lib\NMIndexingServicePS.dll]  [Nero AG, 2,0,16,0]
    [C:\Program Files\Common Files\Ahead\Lib\NMCoFoundation.dll]  [Nero AG, 2,0,16,0]
    [C:\Program Files\Common Files\Ahead\Lib\NMPluginBase.dll]  [Nero AG, 2,0,16,0]
    [C:\Program Files\Common Files\Ahead\Lib\NMFullTextExtraction.dll]  [Nero AG, 2,0,16,0]
    [C:\Program Files\Common Files\Ahead\Lib\NMSearchPluginSimilarImages.dll]  [Nero AG, 2,0,16,0]
    [C:\Program Files\Common Files\Ahead\Lib\NeroIPP.dll]  [Nero AG, 4,11,3,5]
    [C:\Program Files\Common Files\Ahead\Lib\NMDataServices.dll]  [Nero AG, 2,0,16,0]
    [C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvrPS.dll]  [Nero AG, 2,0,16,0]
[PID: 840 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852)]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
[PID: 592 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
[PID: 3584 / Administrator][C:\WINDOWS\system32\wuauclt.exe]  [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
[PID: 2816 / Administrator][C:\WINDOWS\system32\NOTEPAD.EXE]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
[PID: 380 / Administrator][C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe]  [Microsoft Corporation, 4.200.520.1]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
[PID: 3840 / Administrator][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 7.00.5730.13 (longhorn(wmbla).070711-1130)]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Inc., 1,0,5,11]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx]  [Adobe Systems, Inc., 9,0,124,0]
[PID: 4040 / Administrator][C:\Program Files\Symantec\Symantec Endpoint Protection\SymCorpUI.exe]  [Symantec Corporation, 11.0.2000.1253]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Common Files\Symantec Shared\ccL60U8.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SymCorpUIRes.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\ActaRes.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\ProtectionProviderPS.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\ProtectionUtil.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.6030.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.6030.0]
    [C:\Program Files\Common Files\Symantec Shared\ccL60U.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\ProtectionUtilRes.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\SavMainUI.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SavMainUIRes.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCEvt.dll]  [Symantec Corporation, 3.3.6.8]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\ccEvtCli.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\Program Files\Common Files\Symantec Shared\ccSvc.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\ScsComms_VC8.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\HPPProtectionProviderUI.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\HPPProtectionproviderUIRes.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\Cliproxy.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Common Files\Symantec Shared\ccL608.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\PScanRes.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\NAVNTUTL.DLL]  [Symantec Corporation, 11.0.2000.1253]
    [C:\WINDOWS\system32\nts.dll]  [LANDesk Software Ltd., 6.12.0.148 E]
    [C:\WINDOWS\system32\cba.dll]  [LANDesk Software Ltd., 6.12.0.148 E]
    [C:\WINDOWS\system32\MsgSys.dll]  [LANDesk Software Ltd., 6.12.0.148 E]
    [C:\WINDOWS\system32\PDS.DLL]  [LANDesk Software Ltd., 6.12.0.148 E]
    [C:\Program Files\Common Files\Symantec Shared\SRTSP\SRTSP32.DLL]  [Symantec Corporation, 10.2.4.3]
    [C:\Program Files\Common Files\Symantec Shared\ccProSub.dll]  [Symantec Corporation, 106.3.6.9]
[PID: 4060 / Administrator][C:\Program Files\Symantec\Symantec Endpoint Protection\SavUI.exe]  [Symantec Corporation, 11.0.2000.1253]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\scandlgs.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Common Files\Symantec Shared\ccL608.dll]  [Symantec Corporation, 106.3.6.9]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\ScanDlgsRes.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Common Files\Symantec Shared\SRTSP\SRTSP32.DLL]  [Symantec Corporation, 10.2.4.3]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\LDVPCtls.ocx]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\LDVPCtlsRes.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\Cliproxy.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\ActaRes.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\PScanRes.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\NAVNTUTL.DLL]  [Symantec Corporation, 11.0.2000.1253]
    [C:\Program Files\Symantec\Symantec Endpoint Protection\ScsComms_VC8.dll]  [Symantec Corporation, 11.0.2000.1253]
    [C:\WINDOWS\system32\nts.dll]  [LANDesk Software Ltd., 6.12.0.148 E]
    [C:\WINDOWS\system32\cba.dll]  [LANDesk Software Ltd., 6.12.0.148 E]
    [C:\WINDOWS\system32\MsgSys.dll]  [LANDesk Software Ltd., 6.12.0.148 E]
    [C:\WINDOWS\system32\PDS.DLL]  [LANDesk Software Ltd., 6.12.0.148 E]
[PID: 400 / Administrator][C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.016\SREngLdr.EXE]  [Smallfrogs Studio, 2.6.12.1018]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
[PID: 3296 / Administrator][C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.016\SREff8b8940.EXE]  [Smallfrogs Studio, 2.6.12.1018]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
    [C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.016\Lang\1028.DLL]  [System Repair Engineer, 2.6.12.1018]
    [C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.016\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]
    [C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Inc., 1,0,5,11]

==================================
文件關聯
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1       localhost

==================================
進程特權掃描
特殊特權被允許: SeLoadDriverPrivilege [PID = 400, C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMP\RAR$EX00.016\SRENGLDR.EXE]

==================================
API HOOK
入口點錯誤:NtCreateFile (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤:NtCreateKey (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤:NtCreateThread (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤:NtDeleteFile (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤:NtOpenKey (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤:NtRenameKey (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤:NtSetInformationFile (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤:NtSetValueKey (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤:NtTerminateProcess (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤:ZwCreateFile (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤:ZwCreateKey (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤:ZwCreateThread (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤:ZwDeleteFile (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤:ZwOpenFile (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤:ZwRenameKey (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤:ZwSetInformationFile (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤:ZwSetValueKey (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤:ZwTerminateProcess (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)

==================================
隱藏進程
N/A

TOP

有冇人幫下我

TOP

有冇人幫下我啊

TOP

有沒有該病毒樣本 ?

TOP

DEL 左  不過 symantc 是報木馬

TOP

發新話題