我的防毒軟件有一部份不能更新

發表時間: 2008-9-16 22:03    作者: man1221995    來源: AVPClub Security Home

字體: 小 中 大 | 打印

我的防毒軟件有一部份不能更新 上一次中了木馬  但是我的防毒軟件把毒delete左  but 就左這時不能更新  有相給大家   高手教教我    我不能把防毒重裝  有冇其他解決方法?   

我也來說兩句 查看全部評論 相關評論

• ㄚ一 (2008-9-16 22:33:27)

  先跑一份SRENG LOG
  http://www.avpclub.ddns.info/discuz/thread-6565-1-1.html
  
  有發現問題再跟你說

• man1221995 (2008-9-24 17:12:49)

  跑左
  
  System Repair Engineer 2.6.12.1018
  Smallfrogs (http://www.KZTechs.com)
  
  Windows XP Professional Service Pack 3 (Build 2600) - 管理許可權用戶 - 完整功能
  
  以下內容被選中：
      所有的啟動項目（包括註冊表、開機檔案夾、服務等）
      流覽器載入項
      正在運行的進程（包括進程模組資訊）
      文件關聯
      Winsock 提供者
      Autorun.inf
      HOSTS 文件
      進程特權掃描
  
  
  啟動專案
  註冊表
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
      <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Component Publisher]
      <BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}><"C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe">  [(Verified)Nero AG]
  [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
      <load><>  [N/A]
  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
      <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [(Verified)Microsoft Windows Publisher]
      <ccApp><"C:\Program Files\Common Files\Symantec Shared\ccApp.exe">  [(Verified)Symantec Corporation]
      <CJIMETIPSYNC><C:\Program Files\Common Files\Microsoft Shared\IME\IMTC65\CHANGJIE\CINTLCFG.EXE /CJIMETIPSync>  [(Verified)Microsoft Corporation]
      <PHIMETIPSYNC><C:\Program Files\Common Files\Microsoft Shared\IME\IMTC65\PHONETIC\TINTLCFG.EXE /PHIMETIPSync>  [(Verified)Microsoft Corporation]
      <SysTrayApp><%ProgramFiles%\IDT\WDM\sttray.exe>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
      <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
      <nwiz><nwiz.exe /install>  []
      <NvMediaCenter><RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
      <TkBellExe><; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot>  [(Verified)"RealNetworks, Inc."]
      <QuickTime Task><; "C:\Program Files\QuickTime\qttask.exe" -atboottime>  [Apple Inc.]
      <AppleSyncNotifier><C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe>  [(Verified)Apple Inc.]
      <iTunesHelper><; "C:\Program Files\iTunes\iTunesHelper.exe">  [(Verified)Apple Inc.]
      <Adobe Reader Speed Launcher><; "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe">  [(Verified)"Adobe Systems, Incorporated"]
      <NeroFilterCheck><; C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe>  [(Verified)Nero AG]
      <SunJavaUpdateSched><; "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe">  [(Verified)"Sun Microsystems, Inc."]
  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
      <shell><Explorer.exe>  [(Verified)Microsoft Windows Component Publisher]
      <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Windows Component Publisher]
  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
      <AppInit_DLLs><>  [N/A]
  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
      <UIHost><logonui.exe>  [(Verified)Microsoft Windows Component Publisher]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
      <WPDShServiceObj><C:\WINDOWS\system32\WPDShServiceObj.dll>  [(Verified)Microsoft Windows Component Publisher]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}]
      <IE7 Uninstall Stub><C:\WINDOWS\system32\ieudinit.exe>  [(Verified)Microsoft Windows]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
      <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [File is missing]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
      <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [File is missing]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
      <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [File is missing]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
      <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT>  [(Verified)Microsoft Windows Publisher]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
      <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser>  [(Verified)Microsoft Windows Publisher]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
      <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp.inf,PerUserStub>  [(Verified)Microsoft Windows Component Publisher]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
      <Address Book 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [File is missing]
  
  ==================================
  開機檔案夾
  N/A
  
  ==================================
  服務
  [Apple Mobile Device / Apple Mobile Device][Running/Auto Start]
    <"C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe"><Apple Inc.>
  [Bonjour 服務 / Bonjour Service][Running/Auto Start]
    <"C:\Program Files\Bonjour\mDNSResponder.exe"><Apple Inc.>
  [Symantec Event Manager / ccEvtMgr][Running/Auto Start]
    <"C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon><Symantec Corporation>
  [Symantec Settings Manager / ccSetMgr][Running/Auto Start]
    <"C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon><Symantec Corporation>
  [Human Interface Device Access / HidServ][Stopped/Disabled]
    <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
  [iPod 服務 / iPod Service][Running/Manual Start]
    <"C:\Program Files\iPod\bin\iPodService.exe"><Apple Inc.>
  [LiveUpdate / LiveUpdate][Stopped/Manual Start]
    <"C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE"><Symantec Corporation>
  [NBService / NBService][Stopped/Manual Start]
    <C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe><Nero AG>
  [NMIndexingService / NMIndexingService][Running/Manual Start]
    <"C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe"><Nero AG>
  [NVIDIA Display Driver Service / NVSvc][Running/Auto Start]
    <C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>
  [Symantec Management Client / SmcService][Running/Auto Start]
    <"C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe"><Symantec Corporation>
  [Symantec Network Access Control / SNAC][Stopped/Manual Start]
    <"C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE"><Symantec Corporation>
  [Audio Service / STacSV][Running/Auto Start]
    <c:\program files\idt\ecsxpv_5762_010208\wdm\STacSV.exe><IDT, Inc.>
  [Symantec Endpoint Protection / Symantec AntiVirus][Running/Auto Start]
    <"C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe"><Symantec Corporation>
  [Windows Live Setup Service / WLSetupSvc][Stopped/Manual Start]
    <"C:\Program Files\Windows Live\installer\WLSetupSvc.exe"><Microsoft Corporation>
  
  ==================================
  驅動程式
  [AMD HwPState Processor Driver / AmdPPM][Running/System Start]
    <system32\DRIVERS\AmdPPM.sys><Advanced Micro Devices>
  [COH_Mon / COH_Mon][Stopped/Manual Start]
    <\??\C:\WINDOWS\system32\Drivers\COH_Mon.sys><Symantec Corporation>
  [Symantec Eraser Control driver / eeCtrl][Running/System Start]
    <\??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys><Symantec Corporation>
  [EraserUtilRebootDrv / EraserUtilRebootDrv][Running/Manual Start]
    <\??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys><Symantec Corporation>
  [GEAR ASPI Filter Driver / GEARAspiWDM][Stopped/Manual Start]
    <System32\Drivers\GEARAspiWDM.sys><GEAR Software Inc.>
  [Microsoft UAA Bus Driver for High Definition Audio / HDAudBus][Running/Manual Start]
    <system32\DRIVERS\HDAudBus.sys><Windows (R) Server 2003 DDK provider>
  [IPvE Adapter Driver / IPvE][Running/Manual Start]
    <system32\DRIVERS\IPvE.sys><Hongtien>
  [NAVENG / NAVENG][Running/Manual Start]
    <\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080923.040\NAVENG.SYS><Symantec Corporation>
  [NAVEX15 / NAVEX15][Running/Manual Start]
    <\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080923.040\NAVEX15.SYS><Symantec Corporation>
  [nv / nv][Running/Manual Start]
    <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
  [NVIDIA nForce Networking Controller Driver / NVENETFD][Running/Manual Start]
    <system32\DRIVERS\NVENETFD.sys><NVIDIA Corporation>
  [Service for NVIDIA High Definition Audio Driver / NVHDA][Running/Manual Start]
    <system32\drivers\nvhda32.sys><NVIDIA Corporation>
  [NVIDIA Network Bus Enumerator / nvnetbus][Running/Manual Start]
    <system32\DRIVERS\nvnetbus.sys><NVIDIA Corporation>
  [nvsmu / nvsmu][Running/Manual Start]
    <system32\DRIVERS\nvsmu.sys><NVIDIA Corporation>
  [直接平行連接埠連結驅動程式 / Ptilink][Running/Manual Start]
    <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
  [Secdrv / Secdrv][Stopped/Manual Start]
    <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
  [SPBBCDrv / SPBBCDrv][Running/System Start]
    <\??\C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys><Symantec Corporation>
  [SRTSP / SRTSP][Running/System Start]
    <System32\Drivers\SRTSP.SYS><Symantec Corporation>
  [SRTSPL / SRTSPL][Stopped/Manual Start]
    <System32\Drivers\SRTSPL.SYS><Symantec Corporation>
  [SRTSPX / SRTSPX][Running/System Start]
    <System32\Drivers\SRTSPX.SYS><Symantec Corporation>
  [IDT High Definition Audio CODEC / STHDA][Running/Manual Start]
    <system32\drivers\sthda.sys><IDT, Inc.>
  [SymEvent / SymEvent][Running/Manual Start]
    <\??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS><Symantec Corporation>
  [SYMREDRV / SYMREDRV][Running/Manual Start]
    <\SystemRoot\System32\Drivers\SYMREDRV.SYS><Symantec Corporation>
  [SYMTDI / SYMTDI][Running/System Start]
    <\SystemRoot\System32\Drivers\SYMTDI.SYS><Symantec Corporation>
  [SysPlant for NT / SysPlant][Running/Boot Start]
    <\SystemRoot\SYSTEM32\Drivers\SysPlant.sys><Symantec Corporation>
  [Teefer2 Miniport / Teefer2][Running/Manual Start]
    <system32\DRIVERS\teefer2.sys><Symantec Corporation>
  [Apple Mobile USB Driver / USBAAPL][Stopped/Manual Start]
    <System32\Drivers\usbaapl.sys><Apple, Inc.>
  [WPS / WPS][Running/System Start]
    <\??\C:\WINDOWS\system32\drivers\wpsdrvnt.sys><Symantec Corporation>
  [WpsHelper / WpsHelper][Running/Manual Start]
    <\??\C:\WINDOWS\system32\drivers\WpsHelper.sys><Symantec Corporation>
  
  ==================================
  流覽器載入項
  [Adobe PDF Reader Link Helper]
    {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll, (Signed) Adobe Systems Incorporated>
  [SSVHelper Class]
    {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} <C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll, (Signed) Sun Microsystems, Inc.>
  []
    {7E853D72-626A-48EC-A868-BA8D5E23E045} <, >
  [Windows Live 登入小幫手]
    {9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, (Signed) Microsoft Corporation>
  [Java Plug-in 1.6.0_06]
    {08B0E5C0-4FCB-11CF-AAA5-00401C608501} <C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll, (Signed) Sun Microsystems, Inc.>
  [參考資料(&R)]
    {92780B25-18CC-41C8-B9BE-3C9C571A8263} <C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL, (Signed) Microsoft Corporation>
  []
    {e2e2dd38-d088-4134-82b7-f2ba38496583} <%windir%\Network Diagnostic\xpnetdiag.exe, (Signed) N/A>
  [Messenger]
    {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, (Signed) Microsoft Corporation>
  [TRLuncherROC Control]
    {05BCE06B-A300-4C4E-A42F-4C04BCCDE63B} <C:\WINDOWS\DOWNLO~1\TRLUNC~1.OCX, Nowcom>
  [Symantec AntiVirus scanner]
    {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} <C:\WINDOWS\Downloaded Program Files\avsniff.dll, (Signed) Symantec Corporation>
  [WUWebControl Class]
    {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, (Signed) Microsoft Corporation>
  [Symantec RuFSI Utility Class]
    {644E432F-49D3-41A1-8DD5-E099162EEEC5} <C:\WINDOWS\Downloaded Program Files\rufsi.dll, (Signed) Symantec Corporation>
  [Java Plug-in 1.6.0_06]
    {8AD9C840-044E-11D1-B3E9-00805F499D93} <C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll, (Signed) Sun Microsystems, Inc.>
  []
    {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} <, >
  [Java Plug-in 1.6.0_06]
    {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll, (Signed) Sun Microsystems, Inc.>
  [Java Plug-in 1.6.0_06]
    {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.6.0_06\bin\npjpi160_06.dll, (Signed) Sun Microsystems, Inc.>
  [TRLuncherROC Control]
    {05BCE06B-A300-4C4E-A42F-4C04BCCDE63B} <C:\WINDOWS\DOWNLO~1\TRLUNC~1.OCX, Nowcom>
  [Adobe PDF Reader Link Helper]
    {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll, (Signed) Adobe Systems Incorporated>
  []
    {08B0E5C0-4FCB-11CF-AAA5-00401C608501} <, >
  []
    {0CCA191D-13A6-4E29-B746-314DEE697D83} <, >
  [InformationCardSigninHelper Class]
    {19916E01-B44E-4E31-94A4-4696DF46157B} <C:\WINDOWS\system32\icardie.dll, (Signed) Microsoft Corporation>
  [Windows Media Player]
    {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, (Signed) Microsoft Corporation>
  [XML DOM Document]
    {2933BF90-7B36-11D2-B20E-00C04F983E60} <%SystemRoot%\system32\msxml3.dll, (Signed) N/A>
  [Symantec AntiVirus scanner]
    {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} <C:\WINDOWS\Downloaded Program Files\avsniff.dll, (Signed) Symantec Corporation>
  [passport 可用指令檔的服務]
    {2D2307C8-7DB4-40D6-9100-D52AF4F97A5B} <%SystemRoot%\system32\netplwiz.dll, (Signed) N/A>
  [DHTML Edit Control Safe for Scripting for IE5]
    {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, (Signed) Microsoft Corporation>
  []
    {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} <, >
  [RealPlayer RAM Download Handler]
    {2F542A2E-EDC9-4BF7-8CB1-87C9919F7F93} <C:\WINDOWS\system32\rmoc3260.dll, N/A>
  [QuickTime Object]
    {4063BE15-3B08-470D-A0D5-B37161CFFD69} <C:\Program Files\QuickTime\QTPlugin.ocx, (Signed) Apple Inc.>
  [XML Document]
    {48123BC4-99D9-11D1-A6B3-00C04FD91555} <%SystemRoot%\system32\msxml3.dll, (Signed) N/A>
  [Microsoft Terminal Services Client Control (redist)]
    {4eb89ff4-7f78-4a0f-8b8d-2bf02e94e4b2} <%systemroot%\system32\mstscax.dll, (Signed) N/A>
  [Microsoft Terminal Services Client Control (redist)]
    {4EDCB26C-D24C-4e72-AF07-B576699AC0DE} <%systemroot%\system32\mstscax.dll, (Signed) N/A>
  []
    {4F1E5B1A-2A80-42CA-8532-2D05CB959537} <, >
  [Shell Name Space]
    {55136805-B2DE-11D1-B9F2-00A0C98BC547} <C:\WINDOWS\system32\ieframe.dll, (Signed) Microsoft Corporation>
  [Symantec RuFSI Utility Class]
    {644E432F-49D3-41A1-8DD5-E099162EEEC5} <C:\WINDOWS\Downloaded Program Files\rufsi.dll, (Signed) Symantec Corporation>
  [Windows Media Player]
    {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
  [Microsoft Terminal Services Client Control (redist)]
    {7390f3d8-0439-4c05-91e3-cf5cb290c3d0} <%systemroot%\system32\mstscax.dll, (Signed) N/A>
  [Microsoft Terminal Services Client Control (redist)]
    {7584c670-2274-4efb-b00b-d6aaba6d3850} <%systemroot%\system32\mstscax.dll, (Signed) N/A>
  [SSVHelper Class]
    {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} <C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll, (Signed) Sun Microsystems, Inc.>
  []
    {7E853D72-626A-48EC-A868-BA8D5E23E045} <, >
  [Microsoft Web Browser]
    {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\ieframe.dll, (Signed) Microsoft Corporation>
  [XML DOM Document 4.0]
    {88D969C0-F192-11D4-A65F-0040963251E5} <C:\WINDOWS\system32\msxml4.dll, Microsoft Corporation>
  [XML HTTP 4.0]
    {88D969C5-F192-11D4-A65F-0040963251E5} <C:\WINDOWS\system32\msxml4.dll, Microsoft Corporation>
  [XML DOM Document 5.0]
    {88D969E5-F192-11D4-A65F-0040963251E5} <C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSXML5.DLL, Microsoft Corporation>
  [XML DOM Document 6.0]
    {88D96A05-F192-11D4-A65F-0040963251E5} <C:\WINDOWS\system32\msxml6.dll, (Signed) Microsoft Corporation>
  []
    {8DE6AB9C-8C62-486B-8C06-5C9AD6FD06F1} <, >
  [Windows Live 登入小幫手]
    {9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, (Signed) Microsoft Corporation>
  [Microsoft Terminal Services Client Control (redist)]
    {9059f30f-4eb1-4bd2-9fdc-36f43a218f4a} <%systemroot%\system32\mstscax.dll, (Signed) N/A>
  []
    {92780B25-18CC-41C8-B9BE-3C9C571A8263} <, >
  [RMGetLicense Class]
    {A9FC132B-096D-460B-B7D5-1DB0FAE0C062} <C:\WINDOWS\system32\msnetobj.dll, (Signed) Microsoft Corporation>
  [Adobe PDF Reader]
    {CA8A9780-280D-11CF-A24D-444553540000} <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.dll, (Signed) Adobe Systems, Inc.>
  [AUDIO__X_MS_WMA Moniker Class]
    {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
  [VIDEO__X_MS_ASF Moniker Class]
    {CD3AFA8F-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
  [Msxml]
    {CFC399AF-D876-11D0-9C10-00C04FC99C8E} <%SystemRoot%\system32\msxml3.dll, (Signed) N/A>
  [RealPlayer G2 Control]
    {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, N/A>
  [Windows Live 登入控制項]
    {D2517915-48CE-4286-970F-921E881B8C5C} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, (Signed) Microsoft Corporation>
  [Shockwave Flash Object]
    {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx, (Signed) Adobe Systems, Inc.>
  []
    {D6E814A0-E0C5-11D4-8D29-0050BA6940E3} <, >
  [iTunesDetector Class]
    {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} <C:\Program Files\iTunes\ITDetector.ocx, (Signed) Apple Inc.>
  [QuickTimeCheck Class]
    {DE4AF3B0-F4D4-11D3-B41A-0050DA2E6C21} <C:\Program Files\QuickTime\QTSystem\QuickTimeCheck.ocx, (Signed) Apple Inc.>
  []
    {E1771B7F-98BE-407F-BA67-AA16ADA5D0C5} <C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGSC8~1.DLL, (Signed) Microsoft Corporation>
  []
    {E2E2DD38-D088-4134-82B7-F2BA38496583} <, >
  [XML HTTP Request]
    {ED8C108E-4349-11D2-91A4-00C04F7969E8} <%SystemRoot%\system32\msxml3.dll, (Signed) N/A>
  []
    {F156768E-81EF-470C-9057-481BA8380DBA} <, >
  [XML DOM Document 3.0]
    {F5078F32-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\system32\msxml3.dll, (Signed) N/A>
  [XML HTTP 3.0]
    {F5078F35-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\system32\msxml3.dll, (Signed) N/A>
  [XML DOM Document]
    {F6D90F11-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\system32\msxml3.dll, (Signed) N/A>
  [XML HTTP]
    {F6D90F16-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\system32\msxml3.dll, (Signed) N/A>
  []
    {F90D830D-C175-4bbe-82C7-FF94669A4C42} <, >
  []
    {FB5DA724-162B-11D3-8B9B-AA70B4B0B524} <, >
  []
    {FB5F1910-F110-11D2-BB9E-00C04F795683} <, >
  [Foxy 下載]
    <res://C:\Program Files\Foxy\Foxy.exe/download.htm, N/A>
  [Foxy 搜尋]
    <res://C:\Program Files\Foxy\Foxy.exe/search.htm, N/A>
  [設為 Messenger Live 頭像]
    <\SetMSNDP.htm, N/A>
  
  ==================================
  正在運行的進程
  [PID: 1112 / SYSTEM][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
  [PID: 1160 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
  [PID: 1184 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\SnacNp.dll]  [Symantec Corporation, 11.0.2000.151]
  [PID: 1228 / SYSTEM][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
  [PID: 1240 / SYSTEM][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
  [PID: 1408 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
  [PID: 1456 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Inc., 1,0,5,11]
  [PID: 1664 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\SymRasMan.dll]  [Symantec Corporation, 11.0.2000.151]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\RasSymEap.dll]  [Symantec Corporation, 11.0.2000.151]
  [PID: 1808 / SYSTEM][C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe]  [Symantec Corporation, 11.0.2000.1231]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\Trident.dll]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\SyLog.dll]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\SyLink.dll]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\DataMan.dll]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\tse.dll]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\PSSensor.dll]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\SSSensor.dll]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\SpNet.dll]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\NacManager.plg]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\IdsTrafficPipe.dll]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\wpsman.dll]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\tfman.dll]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\SgHI.dll]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\Netport.dll]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Common Files\Symantec Shared\ccL608.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SmcRes.dll]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\AVMan.plg]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\devman.plg]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\GUProxy.plg]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\LuMan.plg]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\sfman.plg]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\AvManRes.dll]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\AvPluginImpl.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\GUProxyRes.dll]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\LUManRes.dll]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SfManRes.dll]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\DevManRes.dll]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SgHIRes.dll]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.6030.0]
      [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.6030.0]
      [C:\Program Files\Common Files\Symantec Shared\ccL60U.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\WGXMAN.DLL]  [Symantec Corporation, 11.0.2000.151]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SpNetRes.dll]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\TseRes.dll]  [Symantec Corporation, 11.0.2000.1231]
  [PID: 1920 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
  [PID: 180 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
  [PID: 288 / SYSTEM][C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe]  [Symantec Corporation, 106.3.6.9]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
      [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.6030.0]
      [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.6030.0]
      [C:\Program Files\Common Files\Symantec Shared\ccL60U.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\Program Files\Common Files\Symantec Shared\ccSvc.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\Program Files\Common Files\Symantec Shared\ccSet.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\PROGRA~1\COMMON~1\SYMANT~1\CCSETPLG.DLL]  [Symantec Corporation, 106.3.6.9]
      [C:\PROGRA~1\COMMON~1\SYMANT~1\SAVSUB~1\SUBENG.DLL]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SUBRES.loc]  [Symantec Corporation, 11.0.2000.1253]
      [C:\PROGRA~1\COMMON~1\SYMANT~1\SNDSVC.DLL]  [Symantec Corporation, 7.2.1.110]
      [C:\Program Files\Common Files\Symantec Shared\ccL60.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\PROGRA~1\COMMON~1\SYMANT~1\CCEVTPLG.DLL]  [Symantec Corporation, 106.3.6.9]
      [C:\Program Files\Common Files\Symantec Shared\ccEvtCli.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\PROGRA~1\COMMON~1\SYMANT~1\SPBBC\SPBBCEVT.DLL]  [Symantec Corporation, 3.3.6.8]
      [C:\PROGRA~1\COMMON~1\SYMANT~1\SRTSP\SRTSP32.DLL]  [Symantec Corporation, 10.2.4.3]
      [C:\Program Files\Common Files\Symantec Shared\ccProSub.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\PROGRA~1\COMMON~1\SYMANT~1\CCSETEVT.DLL]  [Symantec Corporation, 106.3.6.9]
      [C:\WINDOWS\system32\ATL71.DLL]  [Microsoft Corporation, 7.10.5057.0]
      [C:\PROGRA~1\COMMON~1\SYMANT~1\SAVSUB~1\SubConn.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\SAVSubmitter.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SAVSubmitterRes.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Common Files\Symantec Shared\SPBBC\bbRGen.dll]  [Symantec Corporation, 3.3.6.8]
  [PID: 716 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852)]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Inc., 1,0,5,11]
  [PID: 1096 / Administrator][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\SnacNp.dll]  [Symantec Corporation, 11.0.2000.151]
  [PID: 1712 / Administrator][C:\Program Files\Common Files\Symantec Shared\ccApp.exe]  [Symantec Corporation, 106.3.6.9]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
      [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.6030.0]
      [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.6030.0]
      [C:\Program Files\Common Files\Symantec Shared\ccL60U.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\WINDOWS\system32\SymNeti.dll]  [Symantec Corporation, 7.2.1.110]
      [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\Program Files\Common Files\Symantec Shared\ccSvc.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\Program Files\Common Files\Symantec Shared\ccSet.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\PROGRA~1\COMMON~1\SYMANT~1\CCALERT.DLL]  [Symantec Corporation, 106.3.6.9]
      [C:\PROGRA~1\COMMON~1\SYMANT~1\CCEMLPXY.DLL]  [Symantec Corporation, 106.3.6.9]
      [C:\PROGRA~1\SYMANTEC\SYMANT~1\SAVSES~1.DLL]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Common Files\Symantec Shared\COH\sesHlp.dll]  [Symantec Corporation, 6.1.7.18]
      [C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\WINDOWS\system32\ATL71.DLL]  [Microsoft Corporation, 7.10.5057.0]
      [C:\Program Files\Common Files\Symantec Shared\COH\sH0007.dll]  [Symantec Corporation, 6,1,7,18]
      [C:\Program Files\Common Files\Symantec Shared\ccProSub.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\PROGRA~1\COMMON~1\SYMANT~1\ccEvtCli.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\PROGRA~1\COMMON~1\SYMANT~1\rcEmlPxy.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\WINDOWS\system32\SymRedir.dll]  [Symantec Corporation, 7.2.1.110]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\SavEmail.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Common Files\Symantec Shared\SRTSP\SRTSP32.DLL]  [Symantec Corporation, 10.2.4.3]
  [PID: 1972 / Administrator][C:\Program Files\IDT\WDM\sttray.exe]  [IDT, Inc., 1.0.5762.0  nd648 cp1]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\IDT\WDM\STLang.dll]  [IDT, Inc., 1.0.5762.0  nd648 cp1]
      [C:\WINDOWS\system32\stacapi.dll]  [IDT, Inc., 1.0.5762.0  nd648 cp1]
  [PID: 2044 / SYSTEM][C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe]  [Apple Inc., 2.10.31.0]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
  [PID: 284 / Administrator][C:\WINDOWS\system32\RUNDLL32.EXE]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
      [C:\WINDOWS\system32\NvMcTray.dll]  [NVIDIA Corporation, 6.14.11.7474]
      [C:\WINDOWS\system32\nvapi.dll]  [NVIDIA Corporation, 6.14.11.7474]
      [C:\WINDOWS\system32\NVRSZHT.DLL]  [NVIDIA Corporation, 6.14.11.7474]
  [PID: 304 / Administrator][C:\Program Files\Common Files\Real\Update_OB\realsched.exe]  [RealNetworks, Inc., 0.1.0.4279]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
  [PID: 324 / SYSTEM][C:\Program Files\Bonjour\mDNSResponder.exe]  [Apple Inc., 1,0,5,11]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
  [PID: 480 / Administrator][C:\Program Files\iTunes\iTunesHelper.exe]  [Apple Inc., 8.0.0.35]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\iTunes\iTunesHelper.Resources\zh_TW.lproj\iTunesHelperLocalized.DLL]  [Apple Inc., 8.0.0.26]
      [C:\Program Files\iTunes\iTunesHelper.Resources\iTunesHelper.DLL]  [Apple Inc., 8.0.0.35]
      [C:\Program Files\QuickTime\QTSystem\QuickTime.qts]  [Apple Inc., 7.5.5 (990.7)]
      [C:\Program Files\Common Files\Apple\Mobile Device Support\bin\iTunesMobileDevice.dll]  [Apple Inc., 185.2.0.4]
  [PID: 520 / Administrator][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
  [PID: 596 / SYSTEM][C:\WINDOWS\system32\nvsvc32.exe]  [NVIDIA Corporation, 6.14.11.7474]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
      [C:\WINDOWS\system32\nvapi.dll]  [NVIDIA Corporation, 6.14.11.7474]
  [PID: 604 / Administrator][C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe]  [Nero AG, 2,0,16,0]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Common Files\Ahead\Lib\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
      [C:\Program Files\Common Files\Ahead\Lib\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
      [C:\Program Files\Common Files\Ahead\Lib\AdvrCntr2.dll]  [Nero AG, 10,1,3, 10900]
      [C:\Program Files\Common Files\Ahead\Lib\NMIndexingServicePS.dll]  [Nero AG, 2,0,16,0]
      [C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvrPS.dll]  [Nero AG, 2,0,16,0]
      [C:\Program Files\Common Files\Ahead\Lib\NMDataServices.dll]  [Nero AG, 2,0,16,0]
  [PID: 864 / SYSTEM][c:\program files\idt\ecsxpv_5762_010208\wdm\STacSV.exe]  [IDT, Inc., 1.0.5762.0  nd648 cp1]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
      [C:\WINDOWS\system32\stacapi.dll]  [IDT, Inc., 1.0.5762.0  nd648 cp1]
  [PID: 2104 / SYSTEM][C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe]  [Symantec Corporation, 11.0.2000.1253]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
      [C:\WINDOWS\system32\CBA.DLL]  [LANDesk Software Ltd., 6.12.0.148 E]
      [C:\WINDOWS\system32\MsgSys.dll]  [LANDesk Software Ltd., 6.12.0.148 E]
      [C:\WINDOWS\system32\NTS.dll]  [LANDesk Software Ltd., 6.12.0.148 E]
      [C:\WINDOWS\system32\PDS.DLL]  [LANDesk Software Ltd., 6.12.0.148 E]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\I2ldvp3.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Common Files\Symantec Shared\ccL608.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\ActaRes.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\PScanRes.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\NAVNTUTL.DLL]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\RTVScanPS.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\ScsComms_VC8.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.6030.0]
      [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.6030.0]
      [C:\Program Files\Common Files\Symantec Shared\SRTSP\SRTSP32.DLL]  [Symantec Corporation, 10.2.4.3]
      [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\Program Files\Common Files\Symantec Shared\ccL60U.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\Program Files\Common Files\Symantec Shared\ccProSub.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\PROGRA~1\COMMON~1\SYMANT~1\ccEvtCli.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\Program Files\Common Files\Symantec Shared\Global Exceptions\GEDataStore.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Common Files\Symantec Shared\dec_abi.dll]  [Symantec Corporation, 1.1.1.39]
      [C:\Program Files\Common Files\Symantec Shared\ccScanw.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\Program Files\Common Files\Symantec Shared\ecmldr32.DLL]  [Symantec Corporation, 61.3.0.17]
      [C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Inc., 1,0,5,11]
      [C:\Program Files\Common Files\Symantec Shared\MSL\msl.dll]  [Symantec Corporation, 5.1.0001.0000]
      [C:\Program Files\Common Files\Symantec Shared\ccSvc.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\IMail.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\IMailRes.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\SymProtectStorage.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCEvt.dll]  [Symantec Corporation, 3.3.6.8]
      [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080923.040\ccEraser.dll]  [Symantec Corporation, 108.2.3.4]
      [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080923.040\ecmsvr32.dll]  [Symantec Corporation, 81.2.0.25]
      [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080923.040\NAVEX32a.DLL]  [Symantec Corporation, 20081.2.0.36]
      [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080923.040\NAVENG32.DLL]  [Symantec Corporation, 20081.2.0.36]
  [PID: 2612 / SYSTEM][C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe]  [Nero AG, 2,0,16,0]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Common Files\Ahead\Lib\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
      [C:\Program Files\Common Files\Ahead\Lib\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
      [C:\Program Files\Common Files\Ahead\Lib\NMIndexingServicePS.dll]  [Nero AG, 2,0,16,0]
      [C:\Program Files\Common Files\Ahead\Lib\NMLogCxx.dll]  [Nero AG, 2,0,16,0]
      [C:\Program Files\Common Files\Ahead\Lib\log4cxx.dll]  [Nero AG, 1, 0, 0, 0]
      [C:\Program Files\Common Files\Ahead\Lib\NMDataServices.dll]  [Nero AG, 2,0,16,0]
  [PID: 2616 / Administrator][C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe]  [Symantec Corporation, 11.0.2000.1231]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\DataMan.dll]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\SyLog.dll]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\SpNet.dll]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\NacManager.plg]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Common Files\Symantec Shared\ccL608.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SmcGuiRes.dll]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SpNetRes.dll]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\RTVScanPS.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\devman.plg]  [Symantec Corporation, 11.0.2000.1231]
      [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.6030.0]
      [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.6030.0]
      [C:\Program Files\Common Files\Symantec Shared\ccL60U.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\WINDOWS\system32\ATL71.DLL]  [Microsoft Corporation, 7.10.5057.0]
      [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\Program Files\Common Files\Symantec Shared\ccProSub.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\PROGRA~1\COMMON~1\SYMANT~1\ccEvtCli.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\Program Files\Common Files\Symantec Shared\ccSvc.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\Program Files\Common Files\Symantec Shared\ccAlert.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\Program Files\Common Files\Symantec Shared\ccSet.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\Cliproxy.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\ActaRes.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\PScanRes.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\NAVNTUTL.DLL]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\ProtectionUtil.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Common Files\Symantec Shared\ccL60U8.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\ProtectionUtilRes.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\ProtectionProviderPS.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\SavMainUI.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SavMainUIRes.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCEvt.dll]  [Symantec Corporation, 3.3.6.8]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\ScsComms_VC8.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\HPPProtectionProviderUI.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\HPPProtectionproviderUIRes.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\WINDOWS\system32\nts.dll]  [LANDesk Software Ltd., 6.12.0.148 E]
      [C:\WINDOWS\system32\cba.dll]  [LANDesk Software Ltd., 6.12.0.148 E]
      [C:\WINDOWS\system32\MsgSys.dll]  [LANDesk Software Ltd., 6.12.0.148 E]
      [C:\WINDOWS\system32\PDS.DLL]  [LANDesk Software Ltd., 6.12.0.148 E]
      [C:\Program Files\Common Files\Symantec Shared\SRTSP\SRTSP32.DLL]  [Symantec Corporation, 10.2.4.3]
  [PID: 3040 / SYSTEM][C:\Program Files\iPod\bin\iPodService.exe]  [Apple Inc., 8.0.0.35]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\iPod\bin\iPodService.Resources\zh_TW.lproj\iPodServiceLocalized.DLL]  [Apple Inc., 8.0.0.26]
      [C:\Program Files\iPod\bin\iPodService.Resources\iPodService.DLL]  [Apple Inc., 8.0.0.35]
  [PID: 3048 / Administrator][C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe]  [Nero AG, 2,0,16,0]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Common Files\Ahead\Lib\NMSQLDB.dll]  [Nero AG, 2,0,16,0]
      [C:\Program Files\Common Files\Ahead\Lib\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
      [C:\Program Files\Common Files\Ahead\Lib\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
      [C:\Program Files\Common Files\Ahead\Lib\NMLogCxx.dll]  [Nero AG, 2,0,16,0]
      [C:\Program Files\Common Files\Ahead\Lib\log4cxx.dll]  [Nero AG, 1, 0, 0, 0]
      [C:\Program Files\Common Files\Ahead\Lib\NMIndexingServicePS.dll]  [Nero AG, 2,0,16,0]
      [C:\Program Files\Common Files\Ahead\Lib\NMCoFoundation.dll]  [Nero AG, 2,0,16,0]
      [C:\Program Files\Common Files\Ahead\Lib\NMPluginBase.dll]  [Nero AG, 2,0,16,0]
      [C:\Program Files\Common Files\Ahead\Lib\NMFullTextExtraction.dll]  [Nero AG, 2,0,16,0]
      [C:\Program Files\Common Files\Ahead\Lib\NMSearchPluginSimilarImages.dll]  [Nero AG, 2,0,16,0]
      [C:\Program Files\Common Files\Ahead\Lib\NeroIPP.dll]  [Nero AG, 4,11,3,5]
      [C:\Program Files\Common Files\Ahead\Lib\NMDataServices.dll]  [Nero AG, 2,0,16,0]
      [C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvrPS.dll]  [Nero AG, 2,0,16,0]
  [PID: 840 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852)]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
  [PID: 592 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
  [PID: 3584 / Administrator][C:\WINDOWS\system32\wuauclt.exe]  [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
  [PID: 2816 / Administrator][C:\WINDOWS\system32\NOTEPAD.EXE]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
  [PID: 380 / Administrator][C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe]  [Microsoft Corporation, 4.200.520.1]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
  [PID: 3840 / Administrator][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 7.00.5730.13 (longhorn(wmbla).070711-1130)]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Inc., 1,0,5,11]
      [C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx]  [Adobe Systems, Inc., 9,0,124,0]
  [PID: 4040 / Administrator][C:\Program Files\Symantec\Symantec Endpoint Protection\SymCorpUI.exe]  [Symantec Corporation, 11.0.2000.1253]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Common Files\Symantec Shared\ccL60U8.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SymCorpUIRes.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\ActaRes.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\ProtectionProviderPS.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\ProtectionUtil.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.6030.0]
      [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.6030.0]
      [C:\Program Files\Common Files\Symantec Shared\ccL60U.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\ProtectionUtilRes.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\SavMainUI.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\SavMainUIRes.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCEvt.dll]  [Symantec Corporation, 3.3.6.8]
      [C:\PROGRA~1\COMMON~1\SYMANT~1\ccEvtCli.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\Program Files\Common Files\Symantec Shared\ccSvc.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\ScsComms_VC8.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\HPPProtectionProviderUI.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\HPPProtectionproviderUIRes.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\Cliproxy.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Common Files\Symantec Shared\ccL608.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\PScanRes.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\NAVNTUTL.DLL]  [Symantec Corporation, 11.0.2000.1253]
      [C:\WINDOWS\system32\nts.dll]  [LANDesk Software Ltd., 6.12.0.148 E]
      [C:\WINDOWS\system32\cba.dll]  [LANDesk Software Ltd., 6.12.0.148 E]
      [C:\WINDOWS\system32\MsgSys.dll]  [LANDesk Software Ltd., 6.12.0.148 E]
      [C:\WINDOWS\system32\PDS.DLL]  [LANDesk Software Ltd., 6.12.0.148 E]
      [C:\Program Files\Common Files\Symantec Shared\SRTSP\SRTSP32.DLL]  [Symantec Corporation, 10.2.4.3]
      [C:\Program Files\Common Files\Symantec Shared\ccProSub.dll]  [Symantec Corporation, 106.3.6.9]
  [PID: 4060 / Administrator][C:\Program Files\Symantec\Symantec Endpoint Protection\SavUI.exe]  [Symantec Corporation, 11.0.2000.1253]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\scandlgs.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Common Files\Symantec Shared\ccL608.dll]  [Symantec Corporation, 106.3.6.9]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\ScanDlgsRes.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Common Files\Symantec Shared\SRTSP\SRTSP32.DLL]  [Symantec Corporation, 10.2.4.3]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\LDVPCtls.ocx]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\LDVPCtlsRes.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\Cliproxy.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\ActaRes.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\res\1028\PScanRes.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\NAVNTUTL.DLL]  [Symantec Corporation, 11.0.2000.1253]
      [C:\Program Files\Symantec\Symantec Endpoint Protection\ScsComms_VC8.dll]  [Symantec Corporation, 11.0.2000.1253]
      [C:\WINDOWS\system32\nts.dll]  [LANDesk Software Ltd., 6.12.0.148 E]
      [C:\WINDOWS\system32\cba.dll]  [LANDesk Software Ltd., 6.12.0.148 E]
      [C:\WINDOWS\system32\MsgSys.dll]  [LANDesk Software Ltd., 6.12.0.148 E]
      [C:\WINDOWS\system32\PDS.DLL]  [LANDesk Software Ltd., 6.12.0.148 E]
  [PID: 400 / Administrator][C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.016\SREngLdr.EXE]  [Smallfrogs Studio, 2.6.12.1018]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
  [PID: 3296 / Administrator][C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.016\SREff8b8940.EXE]  [Smallfrogs Studio, 2.6.12.1018]
      [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Symantec Corporation, 11.0.2000.1231]
      [C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.016\Lang\1028.DLL]  [System Repair Engineer, 2.6.12.1018]
      [C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.016\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]
      [C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Inc., 1,0,5,11]
  
  ==================================
  文件關聯
  .TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
  .EXE  OK. ["%1" %*]
  .COM  OK. ["%1" %*]
  .PIF  OK. ["%1" %*]
  .REG  OK. [regedit.exe "%1"]
  .BAT  OK. ["%1" %*]
  .SCR  OK. ["%1" /S]
  .CHM  OK. ["C:\WINDOWS\hh.exe" %1]
  .HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
  .INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
  .INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
  .VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
  .JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
  .LNK  OK. [{00021401-0000-0000-C000-000000000046}]
  
  ==================================
  Winsock 提供者
  N/A
  
  ==================================
  Autorun.inf
  N/A
  
  ==================================
  HOSTS 文件
  127.0.0.1       localhost
  
  ==================================
  進程特權掃描
  特殊特權被允許： SeLoadDriverPrivilege [PID = 400, C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMP\RAR$EX00.016\SRENGLDR.EXE]
  
  ==================================
  API HOOK
  入口點錯誤：NtCreateFile (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
  入口點錯誤：NtCreateKey (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
  入口點錯誤：NtCreateThread (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
  入口點錯誤：NtDeleteFile (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
  入口點錯誤：NtOpenKey (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
  入口點錯誤：NtRenameKey (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
  入口點錯誤：NtSetInformationFile (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
  入口點錯誤：NtSetValueKey (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
  入口點錯誤：NtTerminateProcess (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
  入口點錯誤：ZwCreateFile (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
  入口點錯誤：ZwCreateKey (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
  入口點錯誤：ZwCreateThread (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
  入口點錯誤：ZwDeleteFile (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
  入口點錯誤：ZwOpenFile (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
  入口點錯誤：ZwRenameKey (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
  入口點錯誤：ZwSetInformationFile (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
  入口點錯誤：ZwSetValueKey (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
  入口點錯誤：ZwTerminateProcess (危險等級: 高,  被下麵模組所HOOK: C:\WINDOWS\SYSTEM32\SYSFER.DLL)
  
  ==================================
  隱藏進程
  N/A

• man1221995 (2008-9-26 20:45:44)

  有冇人幫下我

• man1221995 (2008-9-30 18:46:26)

  有冇人幫下我啊

• integear (2008-10-01 18:14:37)

  有沒有該病毒樣本 ?

• man1221995 (2008-10-01 21:48:46)

  DEL 左  不過 symantc 是報木馬