跑左
System Repair Engineer 2.6.12.1018
Smallfrogs (http://www.KZTechs.com)
Windows XP Professional Service Pack 3 (Build 2600) - 管理許可權用戶 - 完整功能
以下內容被選中：
所有的啟動項目（包括註冊表、開機檔案夾、服務等）
流覽器載入項
正在運行的進程（包括進程模組資訊）
文件關聯
Winsock 提供者
Autorun.inf
HOSTS 文件
進程特權掃描
啟動專案
註冊表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Windows Component Publisher]
<BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}><"C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"> [(Verified)Nero AG]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Windows Publisher]
<ccApp><"C:\Program Files\Common Files\Symantec Shared\ccApp.exe"> [(Verified)Symantec Corporation]
<CJIMETIPSYNC><C:\Program Files\Common Files\Microsoft Shared\IME\IMTC65\CHANGJIE\CINTLCFG.EXE /CJIMETIPSync> [(Verified)Microsoft Corporation]
<PHIMETIPSYNC><C:\Program Files\Common Files\Microsoft Shared\IME\IMTC65\PHONETIC\TINTLCFG.EXE /PHIMETIPSync> [(Verified)Microsoft Corporation]
<SysTrayApp><%ProgramFiles%\IDT\WDM\sttray.exe> [(Verified)Microsoft Windows Hardware Compatibility Publisher]
<NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup> [(Verified)Microsoft Windows Hardware Compatibility Publisher]
<nwiz><nwiz.exe /install> []
<NvMediaCenter><RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit> [(Verified)Microsoft Windows Hardware Compatibility Publisher]
<TkBellExe><; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [(Verified)"RealNetworks, Inc."]
<QuickTime Task><; "C:\Program Files\QuickTime\qttask.exe" -atboottime> [Apple Inc.]
<AppleSyncNotifier><C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe> [(Verified)Apple Inc.]
<iTunesHelper><; "C:\Program Files\iTunes\iTunesHelper.exe"> [(Verified)Apple Inc.]
<Adobe Reader Speed Launcher><; "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"> [(Verified)"Adobe Systems, Incorporated"]
<NeroFilterCheck><; C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe> [(Verified)Nero AG]
<SunJavaUpdateSched><; "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"> [(Verified)"Sun Microsystems, Inc."]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Windows Component Publisher]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
<WPDShServiceObj><C:\WINDOWS\system32\WPDShServiceObj.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}]
<IE7 Uninstall Stub><C:\WINDOWS\system32\ieudinit.exe> [(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
<Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
<Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
<Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
<NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
<Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
<Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp.inf,PerUserStub> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
<Address Book 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [File is missing]
==================================
開機檔案夾
N/A
==================================
服務
[Apple Mobile Device / Apple Mobile Device][Running/Auto Start]
<"C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe"><Apple Inc.>
[Bonjour 服務 / Bonjour Service][Running/Auto Start]
<"C:\Program Files\Bonjour\mDNSResponder.exe"><Apple Inc.>
[Symantec Event Manager / ccEvtMgr][Running/Auto Start]
<"C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon><Symantec Corporation>
[Symantec Settings Manager / ccSetMgr][Running/Auto Start]
<"C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon><Symantec Corporation>
[Human Interface Device Access / HidServ][Stopped/Disabled]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[iPod 服務 / iPod Service][Running/Manual Start]
<"C:\Program Files\iPod\bin\iPodService.exe"><Apple Inc.>
[LiveUpdate / LiveUpdate][Stopped/Manual Start]
<"C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE"><Symantec Corporation>
[NBService / NBService][Stopped/Manual Start]
<C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe><Nero AG>
[NMIndexingService / NMIndexingService][Running/Manual Start]
<"C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe"><Nero AG>
[NVIDIA Display Driver Service / NVSvc][Running/Auto Start]
<C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>
[Symantec Management Client / SmcService][Running/Auto Start]
<"C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe"><Symantec Corporation>
[Symantec Network Access Control / SNAC][Stopped/Manual Start]
<"C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE"><Symantec Corporation>
[Audio Service / STacSV][Running/Auto Start]
<c:\program files\idt\ecsxpv_5762_010208\wdm\STacSV.exe><IDT, Inc.>
[Symantec Endpoint Protection / Symantec AntiVirus][Running/Auto Start]
<"C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe"><Symantec Corporation>
[Windows Live Setup Service / WLSetupSvc][Stopped/Manual Start]
<"C:\Program Files\Windows Live\installer\WLSetupSvc.exe"><Microsoft Corporation>
==================================
驅動程式
[AMD HwPState Processor Driver / AmdPPM][Running/System Start]
<system32\DRIVERS\AmdPPM.sys><Advanced Micro Devices>
[COH_Mon / COH_Mon][Stopped/Manual Start]
<\??\C:\WINDOWS\system32\Drivers\COH_Mon.sys><Symantec Corporation>
[Symantec Eraser Control driver / eeCtrl][Running/System Start]
<\??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys><Symantec Corporation>
[EraserUtilRebootDrv / EraserUtilRebootDrv][Running/Manual Start]
<\??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys><Symantec Corporation>
[GEAR ASPI Filter Driver / GEARAspiWDM][Stopped/Manual Start]
<System32\Drivers\GEARAspiWDM.sys><GEAR Software Inc.>
[Microsoft UAA Bus Driver for High Definition Audio / HDAudBus][Running/Manual Start]
<system32\DRIVERS\HDAudBus.sys><Windows (R) Server 2003 DDK provider>
[IPvE Adapter Driver / IPvE][Running/Manual Start]
<system32\DRIVERS\IPvE.sys><Hongtien>
[NAVENG / NAVENG][Running/Manual Start]
<\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080923.040\NAVENG.SYS><Symantec Corporation>
[NAVEX15 / NAVEX15][Running/Manual Start]
<\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080923.040\NAVEX15.SYS><Symantec Corporation>
[nv / nv][Running/Manual Start]
<system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[NVIDIA nForce Networking Controller Driver / NVENETFD][Running/Manual Start]
<system32\DRIVERS\NVENETFD.sys><NVIDIA Corporation>
[Service for NVIDIA High Definition Audio Driver / NVHDA][Running/Manual Start]
<system32\drivers\nvhda32.sys><NVIDIA Corporation>
[NVIDIA Network Bus Enumerator / nvnetbus][Running/Manual Start]
<system32\DRIVERS\nvnetbus.sys><NVIDIA Corporation>
[nvsmu / nvsmu][Running/Manual Start]
<system32\DRIVERS\nvsmu.sys><NVIDIA Corporation>
[直接平行連接埠連結驅動程式 / Ptilink][Running/Manual Start]
<system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Secdrv / Secdrv][Stopped/Manual Start]
<system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
[SPBBCDrv / SPBBCDrv][Running/System Start]
<\??\C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys><Symantec Corporation>
[SRTSP / SRTSP][Running/System Start]
<System32\Drivers\SRTSP.SYS><Symantec Corporation>
[SRTSPL / SRTSPL][Stopped/Manual Start]
<System32\Drivers\SRTSPL.SYS><Symantec Corporation>
[SRTSPX / SRTSPX][Running/System Start]
<System32\Drivers\SRTSPX.SYS><Symantec Corporation>
[IDT High Definition Audio CODEC / STHDA][Running/Manual Start]
<system32\drivers\sthda.sys><IDT, Inc.>
[SymEvent / SymEvent][Running/Manual Start]
<\??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS><Symantec Corporation>
[SYMREDRV / SYMREDRV][Running/Manual Start]
<\SystemRoot\System32\Drivers\SYMREDRV.SYS><Symantec Corporation>
[SYMTDI / SYMTDI][Running/System Start]
<\SystemRoot\System32\Drivers\SYMTDI.SYS><Symantec Corporation>
[SysPlant for NT / SysPlant][Running/Boot Start]
<\SystemRoot\SYSTEM32\Drivers\SysPlant.sys><Symantec Corporation>
[Teefer2 Miniport / Teefer2][Running/Manual Start]
<system32\DRIVERS\teefer2.sys><Symantec Corporation>
[Apple Mobile USB Driver / USBAAPL][Stopped/Manual Start]
<System32\Drivers\usbaapl.sys><Apple, Inc.>
[WPS / WPS][Running/System Start]
<\??\C:\WINDOWS\system32\drivers\wpsdrvnt.sys><Symantec Corporation>
[WpsHelper / WpsHelper][Running/Manual Start]
<\??\C:\WINDOWS\system32\drivers\WpsHelper.sys><Symantec Corporation>
==================================
流覽器載入項
[Adobe PDF Reader Link Helper]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll, (Signed) Adobe Systems Incorporated>
[SSVHelper Class]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} <C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll, (Signed) Sun Microsystems, Inc.>
[]
{7E853D72-626A-48EC-A868-BA8D5E23E045} <, >
[Windows Live 登入小幫手]
{9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, (Signed) Microsoft Corporation>
[Java Plug-in 1.6.0_06]
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} <C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll, (Signed) Sun Microsystems, Inc.>
[參考資料(&R)]
{92780B25-18CC-41C8-B9BE-3C9C571A8263} <C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL, (Signed) Microsoft Corporation>
[]
{e2e2dd38-d088-4134-82b7-f2ba38496583} <%windir%\Network Diagnostic\xpnetdiag.exe, (Signed) N/A>
[Messenger]
{FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, (Signed) Microsoft Corporation>
[TRLuncherROC Control]
{05BCE06B-A300-4C4E-A42F-4C04BCCDE63B} <C:\WINDOWS\DOWNLO~1\TRLUNC~1.OCX, Nowcom>
[Symantec AntiVirus scanner]
{2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} <C:\WINDOWS\Downloaded Program Files\avsniff.dll, (Signed) Symantec Corporation>
[WUWebControl Class]
{6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, (Signed) Microsoft Corporation>
[Symantec RuFSI Utility Class]
{644E432F-49D3-41A1-8DD5-E099162EEEC5} <C:\WINDOWS\Downloaded Program Files\rufsi.dll, (Signed) Symantec Corporation>
[Java Plug-in 1.6.0_06]
{8AD9C840-044E-11D1-B3E9-00805F499D93} <C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll, (Signed) Sun Microsystems, Inc.>
[]
{8FFBE65D-2C9C-4669-84BD-5829DC0B603C} <, >
[Java Plug-in 1.6.0_06]
{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll, (Signed) Sun Microsystems, Inc.>
[Java Plug-in 1.6.0_06]
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.6.0_06\bin\npjpi160_06.dll, (Signed) Sun Microsystems, Inc.>
[TRLuncherROC Control]
{05BCE06B-A300-4C4E-A42F-4C04BCCDE63B} <C:\WINDOWS\DOWNLO~1\TRLUNC~1.OCX, Nowcom>
[Adobe PDF Reader Link Helper]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll, (Signed) Adobe Systems Incorporated>
[]
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} <, >
[]
{0CCA191D-13A6-4E29-B746-314DEE697D83} <, >
[InformationCardSigninHelper Class]
{19916E01-B44E-4E31-94A4-4696DF46157B} <C:\WINDOWS\system32\icardie.dll, (Signed) Microsoft Corporation>
[Windows Media Player]
{22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, (Signed) Microsoft Corporation>
[XML DOM Document]
{2933BF90-7B36-11D2-B20E-00C04F983E60} <%SystemRoot%\system32\msxml3.dll, (Signed) N/A>
[Symantec AntiVirus scanner]
{2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} <C:\WINDOWS\Downloaded Program Files\avsniff.dll, (Signed) Symantec Corporation>
[passport 可用指令檔的服務]
{2D2307C8-7DB4-40D6-9100-D52AF4F97A5B} <%SystemRoot%\system32\netplwiz.dll, (Signed) N/A>
[DHTML Edit Control Safe for Scripting for IE5]
{2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, (Signed) Microsoft Corporation>
[]
{2F364306-AA45-47B5-9F9D-39A8B94E7EF7} <, >
[RealPlayer RAM Download Handler]
{2F542A2E-EDC9-4BF7-8CB1-87C9919F7F93} <C:\WINDOWS\system32\rmoc3260.dll, N/A>
[QuickTime Object]
{4063BE15-3B08-470D-A0D5-B37161CFFD69} <C:\Program Files\QuickTime\QTPlugin.ocx, (Signed) Apple Inc.>
[XML Document]
{48123BC4-99D9-11D1-A6B3-00C04FD91555} <%SystemRoot%\system32\msxml3.dll, (Signed) N/A>
[Microsoft Terminal Services Client Control (redist)]
{4eb89ff4-7f78-4a0f-8b8d-2bf02e94e4b2} <%systemroot%\system32\mstscax.dll, (Signed) N/A>
[Microsoft Terminal Services Client Control (redist)]
{4EDCB26C-D24C-4e72-AF07-B576699AC0DE} <%systemroot%\system32\mstscax.dll, (Signed) N/A>
[]
{4F1E5B1A-2A80-42CA-8532-2D05CB959537} <, >
[Shell Name Space]
{55136805-B2DE-11D1-B9F2-00A0C98BC547} <C:\WINDOWS\system32\ieframe.dll, (Signed) Microsoft Corporation>
[Symantec RuFSI Utility Class]
{644E432F-49D3-41A1-8DD5-E099162EEEC5} <C:\WINDOWS\Downloaded Program Files\rufsi.dll, (Signed) Symantec Corporation>
[Windows Media Player]
{6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
[Microsoft Terminal Services Client Control (redist)]
{7390f3d8-0439-4c05-91e3-cf5cb290c3d0} <%systemroot%\system32\mstscax.dll, (Signed) N/A>
[Microsoft Terminal Services Client Control (redist)]
{7584c670-2274-4efb-b00b-d6aaba6d3850} <%systemroot%\system32\mstscax.dll, (Signed) N/A>
[SSVHelper Class]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} <C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll, (Signed) Sun Microsystems, Inc.>
[]
{7E853D72-626A-48EC-A868-BA8D5E23E045} <, >
[Microsoft Web Browser]
{8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\ieframe.dll, (Signed) Microsoft Corporation>
[XML DOM Document 4.0]
{88D969C0-F192-11D4-A65F-0040963251E5} <C:\WINDOWS\system32\msxml4.dll, Microsoft Corporation>
[XML HTTP 4.0]
{88D969C5-F192-11D4-A65F-0040963251E5} <C:\WINDOWS\system32\msxml4.dll, Microsoft Corporation>
[XML DOM Document 5.0]
{88D969E5-F192-11D4-A65F-0040963251E5} <C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSXML5.DLL, Microsoft Corporation>
[XML DOM Document 6.0]
{88D96A05-F192-11D4-A65F-0040963251E5} <C:\WINDOWS\system32\msxml6.dll, (Signed) Microsoft Corporation>
[]
{8DE6AB9C-8C62-486B-8C06-5C9AD6FD06F1} <, >
[Windows Live 登入小幫手]
{9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, (Signed) Microsoft Corporation>
[Microsoft Terminal Services Client Control (redist)]
{9059f30f-4eb1-4bd2-9fdc-36f43a218f4a} <%systemroot%\system32\mstscax.dll, (Signed) N/A>
[]
{92780B25-18CC-41C8-B9BE-3C9C571A8263} <, >
[RMGetLicense Class]
{A9FC132B-096D-460B-B7D5-1DB0FAE0C062} <C:\WINDOWS\system32\msnetobj.dll, (Signed) Microsoft Corporation>
[Adobe PDF Reader]
{CA8A9780-280D-11CF-A24D-444553540000} <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.dll, (Signed) Adobe Systems, Inc.>
[AUDIO__X_MS_WMA Moniker Class]
{CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
[VIDEO__X_MS_ASF Moniker Class]
{CD3AFA8F-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
[Msxml]
{CFC399AF-D876-11D0-9C10-00C04FC99C8E} <%SystemRoot%\system32\msxml3.dll, (Signed) N/A>
[RealPlayer G2 Control]
{CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, N/A>
[Windows Live 登入控制項]
{D2517915-48CE-4286-970F-921E881B8C5C} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, (Signed) Microsoft Corporation>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx, (Signed) Adobe Systems, Inc.>
[]
{D6E814A0-E0C5-11D4-8D29-0050BA6940E3} <, >
[iTunesDetector Class]
{D719897A-B07A-4C0C-AEA9-9B663A28DFCB} <C:\Program Files\iTunes\ITDetector.ocx, (Signed) Apple Inc.>
[QuickTimeCheck Class]
{DE4AF3B0-F4D4-11D3-B41A-0050DA2E6C21} <C:\Program Files\QuickTime\QTSystem\QuickTimeCheck.ocx, (Signed) Apple Inc.>
[]
{E1771B7F-98BE-407F-BA67-AA16ADA5D0C5} <C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGSC8~1.DLL, (Signed) Microsoft Corporation>
[]
{E2E2DD38-D088-4134-82B7-F2BA38496583} <, >
[XML HTTP Request]
{ED8C108E-4349-11D2-91A4-00C04F7969E8} <%SystemRoot%\system32\msxml3.dll, (Signed) N/A>
[]
{F156768E-81EF-470C-9057-481BA8380DBA} <, >
[XML DOM Document 3.0]
{F5078F32-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\system32\msxml3.dll, (Signed) N/A>
[XML HTTP 3.0]
{F5078F35-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\system32\msxml3.dll, (Signed) N/A>
[XML DOM Document]
{F6D90F11-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\system32\msxml3.dll, (Signed) N/A>
[XML HTTP]
{F6D90F16-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\system32\msxml3.dll, (Signed) N/A>
[]
{F90D830D-C175-4bbe-82C7-FF94669A4C42} <, >
[]
{FB5DA724-162B-11D3-8B9B-AA70B4B0B524} <, >
[]
{FB5F1910-F110-11D2-BB9E-00C04F795683} <, >
[Foxy 下載]
<res://C:\Program Files\Foxy\Foxy.exe/download.htm, N/A>
[Foxy 搜尋]
<res://C:\Program Files\Foxy\Foxy.exe/search.htm, N/A>
[設為 Messenger Live 頭像]
<\SetMSNDP.htm, N/A>
==================================
正在運行的進程
[PID: 1112 / SYSTEM][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 1160 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 1184 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)]
[C:\Program Files\Symantec\Symantec Endpoint Protection\SnacNp.dll] [Symantec Corporation, 11.0.2000.151]
[PID: 1228 / SYSTEM][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[PID: 1240 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[PID: 1408 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[PID: 1456 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Inc., 1,0,5,11]
[PID: 1664 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\SymRasMan.dll] [Symantec Corporation, 11.0.2000.151]
[C:\Program Files\Symantec\Symantec Endpoint Protection\RasSymEap.dll] [Symantec Corporation, 11.0.2000.151]
[PID: 1808 / SYSTEM][C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe] [Symantec Corporation, 11.0.2000.1231]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\Trident.dll] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\SyLog.dll] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\SyLink.dll] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\DataMan.dll] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\tse.dll] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\PSSensor.dll] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\SSSensor.dll] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\SpNet.dll] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\NacManager.plg] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\IdsTrafficPipe.dll] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\wpsman.dll] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\tfman.dll] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\SgHI.dll] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\Netport.dll] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Common Files\Symantec Shared\ccL608.dll] [Symantec Corporation, 106.3.6.9]
[C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SmcRes.dll] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\AVMan.plg] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\devman.plg] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\GUProxy.plg] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\LuMan.plg] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\sfman.plg] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\AvManRes.dll] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\AvPluginImpl.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\GUProxyRes.dll] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\LUManRes.dll] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SfManRes.dll] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\DevManRes.dll] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SgHIRes.dll] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll] [Symantec Corporation, 106.3.6.9]
[C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.6030.0]
[C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.6030.0]
[C:\Program Files\Common Files\Symantec Shared\ccL60U.dll] [Symantec Corporation, 106.3.6.9]
[C:\Program Files\Symantec\Symantec Endpoint Protection\WGXMAN.DLL] [Symantec Corporation, 11.0.2000.151]
[C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SpNetRes.dll] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\TseRes.dll] [Symantec Corporation, 11.0.2000.1231]
[PID: 1920 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[PID: 180 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[PID: 288 / SYSTEM][C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe] [Symantec Corporation, 106.3.6.9]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.6030.0]
[C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.6030.0]
[C:\Program Files\Common Files\Symantec Shared\ccL60U.dll] [Symantec Corporation, 106.3.6.9]
[C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll] [Symantec Corporation, 106.3.6.9]
[C:\Program Files\Common Files\Symantec Shared\ccSvc.dll] [Symantec Corporation, 106.3.6.9]
[C:\Program Files\Common Files\Symantec Shared\ccSet.dll] [Symantec Corporation, 106.3.6.9]
[C:\PROGRA~1\COMMON~1\SYMANT~1\CCSETPLG.DLL] [Symantec Corporation, 106.3.6.9]
[C:\PROGRA~1\COMMON~1\SYMANT~1\SAVSUB~1\SUBENG.DLL] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SUBRES.loc] [Symantec Corporation, 11.0.2000.1253]
[C:\PROGRA~1\COMMON~1\SYMANT~1\SNDSVC.DLL] [Symantec Corporation, 7.2.1.110]
[C:\Program Files\Common Files\Symantec Shared\ccL60.dll] [Symantec Corporation, 106.3.6.9]
[C:\PROGRA~1\COMMON~1\SYMANT~1\CCEVTPLG.DLL] [Symantec Corporation, 106.3.6.9]
[C:\Program Files\Common Files\Symantec Shared\ccEvtCli.dll] [Symantec Corporation, 106.3.6.9]
[C:\PROGRA~1\COMMON~1\SYMANT~1\SPBBC\SPBBCEVT.DLL] [Symantec Corporation, 3.3.6.8]
[C:\PROGRA~1\COMMON~1\SYMANT~1\SRTSP\SRTSP32.DLL] [Symantec Corporation, 10.2.4.3]
[C:\Program Files\Common Files\Symantec Shared\ccProSub.dll] [Symantec Corporation, 106.3.6.9]
[C:\PROGRA~1\COMMON~1\SYMANT~1\CCSETEVT.DLL] [Symantec Corporation, 106.3.6.9]
[C:\WINDOWS\system32\ATL71.DLL] [Microsoft Corporation, 7.10.5057.0]
[C:\PROGRA~1\COMMON~1\SYMANT~1\SAVSUB~1\SubConn.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\SAVSubmitter.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SAVSubmitterRes.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Common Files\Symantec Shared\SPBBC\bbRGen.dll] [Symantec Corporation, 3.3.6.8]
[PID: 716 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852)]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Inc., 1,0,5,11]
[PID: 1096 / Administrator][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\SnacNp.dll] [Symantec Corporation, 11.0.2000.151]
[PID: 1712 / Administrator][C:\Program Files\Common Files\Symantec Shared\ccApp.exe] [Symantec Corporation, 106.3.6.9]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.6030.0]
[C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.6030.0]
[C:\Program Files\Common Files\Symantec Shared\ccL60U.dll] [Symantec Corporation, 106.3.6.9]
[C:\WINDOWS\system32\SymNeti.dll] [Symantec Corporation, 7.2.1.110]
[C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll] [Symantec Corporation, 106.3.6.9]
[C:\Program Files\Common Files\Symantec Shared\ccSvc.dll] [Symantec Corporation, 106.3.6.9]
[C:\Program Files\Common Files\Symantec Shared\ccSet.dll] [Symantec Corporation, 106.3.6.9]
[C:\PROGRA~1\COMMON~1\SYMANT~1\CCALERT.DLL] [Symantec Corporation, 106.3.6.9]
[C:\PROGRA~1\COMMON~1\SYMANT~1\CCEMLPXY.DLL] [Symantec Corporation, 106.3.6.9]
[C:\PROGRA~1\SYMANTEC\SYMANT~1\SAVSES~1.DLL] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Common Files\Symantec Shared\COH\sesHlp.dll] [Symantec Corporation, 6.1.7.18]
[C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll] [Symantec Corporation, 106.3.6.9]
[C:\WINDOWS\system32\ATL71.DLL] [Microsoft Corporation, 7.10.5057.0]
[C:\Program Files\Common Files\Symantec Shared\COH\sH0007.dll] [Symantec Corporation, 6,1,7,18]
[C:\Program Files\Common Files\Symantec Shared\ccProSub.dll] [Symantec Corporation, 106.3.6.9]
[C:\PROGRA~1\COMMON~1\SYMANT~1\ccEvtCli.dll] [Symantec Corporation, 106.3.6.9]
[C:\PROGRA~1\COMMON~1\SYMANT~1\rcEmlPxy.dll] [Symantec Corporation, 106.3.6.9]
[C:\WINDOWS\system32\SymRedir.dll] [Symantec Corporation, 7.2.1.110]
[C:\Program Files\Symantec\Symantec Endpoint Protection\SavEmail.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Common Files\Symantec Shared\SRTSP\SRTSP32.DLL] [Symantec Corporation, 10.2.4.3]
[PID: 1972 / Administrator][C:\Program Files\IDT\WDM\sttray.exe] [IDT, Inc., 1.0.5762.0 nd648 cp1]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\IDT\WDM\STLang.dll] [IDT, Inc., 1.0.5762.0 nd648 cp1]
[C:\WINDOWS\system32\stacapi.dll] [IDT, Inc., 1.0.5762.0 nd648 cp1]
[PID: 2044 / SYSTEM][C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe] [Apple Inc., 2.10.31.0]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[PID: 284 / Administrator][C:\WINDOWS\system32\RUNDLL32.EXE] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[C:\WINDOWS\system32\NvMcTray.dll] [NVIDIA Corporation, 6.14.11.7474]
[C:\WINDOWS\system32\nvapi.dll] [NVIDIA Corporation, 6.14.11.7474]
[C:\WINDOWS\system32\NVRSZHT.DLL] [NVIDIA Corporation, 6.14.11.7474]
[PID: 304 / Administrator][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] [RealNetworks, Inc., 0.1.0.4279]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[PID: 324 / SYSTEM][C:\Program Files\Bonjour\mDNSResponder.exe] [Apple Inc., 1,0,5,11]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[PID: 480 / Administrator][C:\Program Files\iTunes\iTunesHelper.exe] [Apple Inc., 8.0.0.35]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\iTunes\iTunesHelper.Resources\zh_TW.lproj\iTunesHelperLocalized.DLL] [Apple Inc., 8.0.0.26]
[C:\Program Files\iTunes\iTunesHelper.Resources\iTunesHelper.DLL] [Apple Inc., 8.0.0.35]
[C:\Program Files\QuickTime\QTSystem\QuickTime.qts] [Apple Inc., 7.5.5 (990.7)]
[C:\Program Files\Common Files\Apple\Mobile Device Support\bin\iTunesMobileDevice.dll] [Apple Inc., 185.2.0.4]
[PID: 520 / Administrator][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[PID: 596 / SYSTEM][C:\WINDOWS\system32\nvsvc32.exe] [NVIDIA Corporation, 6.14.11.7474]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[C:\WINDOWS\system32\nvapi.dll] [NVIDIA Corporation, 6.14.11.7474]
[PID: 604 / Administrator][C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe] [Nero AG, 2,0,16,0]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Common Files\Ahead\Lib\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[C:\Program Files\Common Files\Ahead\Lib\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\Program Files\Common Files\Ahead\Lib\AdvrCntr2.dll] [Nero AG, 10,1,3, 10900]
[C:\Program Files\Common Files\Ahead\Lib\NMIndexingServicePS.dll] [Nero AG, 2,0,16,0]
[C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvrPS.dll] [Nero AG, 2,0,16,0]
[C:\Program Files\Common Files\Ahead\Lib\NMDataServices.dll] [Nero AG, 2,0,16,0]
[PID: 864 / SYSTEM][c:\program files\idt\ecsxpv_5762_010208\wdm\STacSV.exe] [IDT, Inc., 1.0.5762.0 nd648 cp1]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[C:\WINDOWS\system32\stacapi.dll] [IDT, Inc., 1.0.5762.0 nd648 cp1]
[PID: 2104 / SYSTEM][C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe] [Symantec Corporation, 11.0.2000.1253]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[C:\WINDOWS\system32\CBA.DLL] [LANDesk Software Ltd., 6.12.0.148 E]
[C:\WINDOWS\system32\MsgSys.dll] [LANDesk Software Ltd., 6.12.0.148 E]
[C:\WINDOWS\system32\NTS.dll] [LANDesk Software Ltd., 6.12.0.148 E]
[C:\WINDOWS\system32\PDS.DLL] [LANDesk Software Ltd., 6.12.0.148 E]
[C:\Program Files\Symantec\Symantec Endpoint Protection\I2ldvp3.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Common Files\Symantec Shared\ccL608.dll] [Symantec Corporation, 106.3.6.9]
[C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\ActaRes.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\PScanRes.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\NAVNTUTL.DLL] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\RTVScanPS.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\ScsComms_VC8.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.6030.0]
[C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.6030.0]
[C:\Program Files\Common Files\Symantec Shared\SRTSP\SRTSP32.DLL] [Symantec Corporation, 10.2.4.3]
[C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll] [Symantec Corporation, 106.3.6.9]
[C:\Program Files\Common Files\Symantec Shared\ccL60U.dll] [Symantec Corporation, 106.3.6.9]
[C:\Program Files\Common Files\Symantec Shared\ccProSub.dll] [Symantec Corporation, 106.3.6.9]
[C:\PROGRA~1\COMMON~1\SYMANT~1\ccEvtCli.dll] [Symantec Corporation, 106.3.6.9]
[C:\Program Files\Common Files\Symantec Shared\Global Exceptions\GEDataStore.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Common Files\Symantec Shared\dec_abi.dll] [Symantec Corporation, 1.1.1.39]
[C:\Program Files\Common Files\Symantec Shared\ccScanw.dll] [Symantec Corporation, 106.3.6.9]
[C:\Program Files\Common Files\Symantec Shared\ecmldr32.DLL] [Symantec Corporation, 61.3.0.17]
[C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Inc., 1,0,5,11]
[C:\Program Files\Common Files\Symantec Shared\MSL\msl.dll] [Symantec Corporation, 5.1.0001.0000]
[C:\Program Files\Common Files\Symantec Shared\ccSvc.dll] [Symantec Corporation, 106.3.6.9]
[C:\Program Files\Symantec\Symantec Endpoint Protection\IMail.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\IMailRes.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\SymProtectStorage.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCEvt.dll] [Symantec Corporation, 3.3.6.8]
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080923.040\ccEraser.dll] [Symantec Corporation, 108.2.3.4]
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080923.040\ecmsvr32.dll] [Symantec Corporation, 81.2.0.25]
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080923.040\NAVEX32a.DLL] [Symantec Corporation, 20081.2.0.36]
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080923.040\NAVENG32.DLL] [Symantec Corporation, 20081.2.0.36]
[PID: 2612 / SYSTEM][C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe] [Nero AG, 2,0,16,0]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Common Files\Ahead\Lib\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[C:\Program Files\Common Files\Ahead\Lib\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\Program Files\Common Files\Ahead\Lib\NMIndexingServicePS.dll] [Nero AG, 2,0,16,0]
[C:\Program Files\Common Files\Ahead\Lib\NMLogCxx.dll] [Nero AG, 2,0,16,0]
[C:\Program Files\Common Files\Ahead\Lib\log4cxx.dll] [Nero AG, 1, 0, 0, 0]
[C:\Program Files\Common Files\Ahead\Lib\NMDataServices.dll] [Nero AG, 2,0,16,0]
[PID: 2616 / Administrator][C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe] [Symantec Corporation, 11.0.2000.1231]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\DataMan.dll] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\SyLog.dll] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\SpNet.dll] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\NacManager.plg] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Common Files\Symantec Shared\ccL608.dll] [Symantec Corporation, 106.3.6.9]
[C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SmcGuiRes.dll] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SpNetRes.dll] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\RTVScanPS.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\devman.plg] [Symantec Corporation, 11.0.2000.1231]
[C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.6030.0]
[C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.6030.0]
[C:\Program Files\Common Files\Symantec Shared\ccL60U.dll] [Symantec Corporation, 106.3.6.9]
[C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll] [Symantec Corporation, 106.3.6.9]
[C:\WINDOWS\system32\ATL71.DLL] [Microsoft Corporation, 7.10.5057.0]
[C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll] [Symantec Corporation, 106.3.6.9]
[C:\Program Files\Common Files\Symantec Shared\ccProSub.dll] [Symantec Corporation, 106.3.6.9]
[C:\PROGRA~1\COMMON~1\SYMANT~1\ccEvtCli.dll] [Symantec Corporation, 106.3.6.9]
[C:\Program Files\Common Files\Symantec Shared\ccSvc.dll] [Symantec Corporation, 106.3.6.9]
[C:\Program Files\Common Files\Symantec Shared\ccAlert.dll] [Symantec Corporation, 106.3.6.9]
[C:\Program Files\Common Files\Symantec Shared\ccSet.dll] [Symantec Corporation, 106.3.6.9]
[C:\Program Files\Symantec\Symantec Endpoint Protection\Cliproxy.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\ActaRes.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\PScanRes.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\NAVNTUTL.DLL] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\ProtectionUtil.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Common Files\Symantec Shared\ccL60U8.dll] [Symantec Corporation, 106.3.6.9]
[C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\ProtectionUtilRes.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\ProtectionProviderPS.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\SavMainUI.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SavMainUIRes.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCEvt.dll] [Symantec Corporation, 3.3.6.8]
[C:\Program Files\Symantec\Symantec Endpoint Protection\ScsComms_VC8.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\HPPProtectionProviderUI.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\HPPProtectionproviderUIRes.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\WINDOWS\system32\nts.dll] [LANDesk Software Ltd., 6.12.0.148 E]
[C:\WINDOWS\system32\cba.dll] [LANDesk Software Ltd., 6.12.0.148 E]
[C:\WINDOWS\system32\MsgSys.dll] [LANDesk Software Ltd., 6.12.0.148 E]
[C:\WINDOWS\system32\PDS.DLL] [LANDesk Software Ltd., 6.12.0.148 E]
[C:\Program Files\Common Files\Symantec Shared\SRTSP\SRTSP32.DLL] [Symantec Corporation, 10.2.4.3]
[PID: 3040 / SYSTEM][C:\Program Files\iPod\bin\iPodService.exe] [Apple Inc., 8.0.0.35]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\iPod\bin\iPodService.Resources\zh_TW.lproj\iPodServiceLocalized.DLL] [Apple Inc., 8.0.0.26]
[C:\Program Files\iPod\bin\iPodService.Resources\iPodService.DLL] [Apple Inc., 8.0.0.35]
[PID: 3048 / Administrator][C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe] [Nero AG, 2,0,16,0]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Common Files\Ahead\Lib\NMSQLDB.dll] [Nero AG, 2,0,16,0]
[C:\Program Files\Common Files\Ahead\Lib\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[C:\Program Files\Common Files\Ahead\Lib\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\Program Files\Common Files\Ahead\Lib\NMLogCxx.dll] [Nero AG, 2,0,16,0]
[C:\Program Files\Common Files\Ahead\Lib\log4cxx.dll] [Nero AG, 1, 0, 0, 0]
[C:\Program Files\Common Files\Ahead\Lib\NMIndexingServicePS.dll] [Nero AG, 2,0,16,0]
[C:\Program Files\Common Files\Ahead\Lib\NMCoFoundation.dll] [Nero AG, 2,0,16,0]
[C:\Program Files\Common Files\Ahead\Lib\NMPluginBase.dll] [Nero AG, 2,0,16,0]
[C:\Program Files\Common Files\Ahead\Lib\NMFullTextExtraction.dll] [Nero AG, 2,0,16,0]
[C:\Program Files\Common Files\Ahead\Lib\NMSearchPluginSimilarImages.dll] [Nero AG, 2,0,16,0]
[C:\Program Files\Common Files\Ahead\Lib\NeroIPP.dll] [Nero AG, 4,11,3,5]
[C:\Program Files\Common Files\Ahead\Lib\NMDataServices.dll] [Nero AG, 2,0,16,0]
[C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvrPS.dll] [Nero AG, 2,0,16,0]
[PID: 840 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852)]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[PID: 592 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[PID: 3584 / Administrator][C:\WINDOWS\system32\wuauclt.exe] [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[PID: 2816 / Administrator][C:\WINDOWS\system32\NOTEPAD.EXE] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[PID: 380 / Administrator][C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe] [Microsoft Corporation, 4.200.520.1]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[PID: 3840 / Administrator][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 7.00.5730.13 (longhorn(wmbla).070711-1130)]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Inc., 1,0,5,11]
[C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx] [Adobe Systems, Inc., 9,0,124,0]
[PID: 4040 / Administrator][C:\Program Files\Symantec\Symantec Endpoint Protection\SymCorpUI.exe] [Symantec Corporation, 11.0.2000.1253]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Common Files\Symantec Shared\ccL60U8.dll] [Symantec Corporation, 106.3.6.9]
[C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SymCorpUIRes.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\ActaRes.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\ProtectionProviderPS.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\ProtectionUtil.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll] [Symantec Corporation, 106.3.6.9]
[C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.6030.0]
[C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.6030.0]
[C:\Program Files\Common Files\Symantec Shared\ccL60U.dll] [Symantec Corporation, 106.3.6.9]
[C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\ProtectionUtilRes.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\SavMainUI.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SavMainUIRes.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCEvt.dll] [Symantec Corporation, 3.3.6.8]
[C:\PROGRA~1\COMMON~1\SYMANT~1\ccEvtCli.dll] [Symantec Corporation, 106.3.6.9]
[C:\Program Files\Common Files\Symantec Shared\ccSvc.dll] [Symantec Corporation, 106.3.6.9]
[C:\Program Files\Symantec\Symantec Endpoint Protection\ScsComms_VC8.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\HPPProtectionProviderUI.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\HPPProtectionproviderUIRes.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\Cliproxy.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Common Files\Symantec Shared\ccL608.dll] [Symantec Corporation, 106.3.6.9]
[C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\PScanRes.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\NAVNTUTL.DLL] [Symantec Corporation, 11.0.2000.1253]
[C:\WINDOWS\system32\nts.dll] [LANDesk Software Ltd., 6.12.0.148 E]
[C:\WINDOWS\system32\cba.dll] [LANDesk Software Ltd., 6.12.0.148 E]
[C:\WINDOWS\system32\MsgSys.dll] [LANDesk Software Ltd., 6.12.0.148 E]
[C:\WINDOWS\system32\PDS.DLL] [LANDesk Software Ltd., 6.12.0.148 E]
[C:\Program Files\Common Files\Symantec Shared\SRTSP\SRTSP32.DLL] [Symantec Corporation, 10.2.4.3]
[C:\Program Files\Common Files\Symantec Shared\ccProSub.dll] [Symantec Corporation, 106.3.6.9]
[PID: 4060 / Administrator][C:\Program Files\Symantec\Symantec Endpoint Protection\SavUI.exe] [Symantec Corporation, 11.0.2000.1253]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[C:\Program Files\Symantec\Symantec Endpoint Protection\scandlgs.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Common Files\Symantec Shared\ccL608.dll] [Symantec Corporation, 106.3.6.9]
[C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\ScanDlgsRes.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Common Files\Symantec Shared\SRTSP\SRTSP32.DLL] [Symantec Corporation, 10.2.4.3]
[C:\Program Files\Symantec\Symantec Endpoint Protection\LDVPCtls.ocx] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\LDVPCtlsRes.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\Cliproxy.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\ActaRes.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\PScanRes.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\NAVNTUTL.DLL] [Symantec Corporation, 11.0.2000.1253]
[C:\Program Files\Symantec\Symantec Endpoint Protection\ScsComms_VC8.dll] [Symantec Corporation, 11.0.2000.1253]
[C:\WINDOWS\system32\nts.dll] [LANDesk Software Ltd., 6.12.0.148 E]
[C:\WINDOWS\system32\cba.dll] [LANDesk Software Ltd., 6.12.0.148 E]
[C:\WINDOWS\system32\MsgSys.dll] [LANDesk Software Ltd., 6.12.0.148 E]
[C:\WINDOWS\system32\PDS.DLL] [LANDesk Software Ltd., 6.12.0.148 E]
[PID: 400 / Administrator][C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.016\SREngLdr.EXE] [Smallfrogs Studio, 2.6.12.1018]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[PID: 3296 / Administrator][C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.016\SREff8b8940.EXE] [Smallfrogs Studio, 2.6.12.1018]
[C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Symantec Corporation, 11.0.2000.1231]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.016\Lang\1028.DLL] [System Repair Engineer, 2.6.12.1018]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.016\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15]
[C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Inc., 1,0,5,11]
==================================
文件關聯
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1 localhost
==================================
進程特權掃描
特殊特權被允許： SeLoadDriverPrivilege [PID = 400, C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMP\RAR$EX00.016\SRENGLDR.EXE]
==================================
API HOOK
入口點錯誤：NtCreateFile (危險等級: 高, 被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤：NtCreateKey (危險等級: 高, 被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤：NtCreateThread (危險等級: 高, 被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤：NtDeleteFile (危險等級: 高, 被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤：NtOpenKey (危險等級: 高, 被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤：NtRenameKey (危險等級: 高, 被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤：NtSetInformationFile (危險等級: 高, 被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤：NtSetValueKey (危險等級: 高, 被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤：NtTerminateProcess (危險等級: 高, 被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤：ZwCreateFile (危險等級: 高, 被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤：ZwCreateKey (危險等級: 高, 被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤：ZwCreateThread (危險等級: 高, 被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤：ZwDeleteFile (危險等級: 高, 被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤：ZwOpenFile (危險等級: 高, 被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤：ZwRenameKey (危險等級: 高, 被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤：ZwSetInformationFile (危險等級: 高, 被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤：ZwSetValueKey (危險等級: 高, 被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
入口點錯誤：ZwTerminateProcess (危險等級: 高, 被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
==================================
隱藏進程
N/A