[CODE]

2008-02-11,20:40:58

System Repair Engineer 2.5.16.900
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600) - ºÞ²z³\¥iÅv¥Î¤á - §¹¾ã¥\¯à

¥H¤U¤º®e³Q¿ï¤¤¡G
    ©Ò¦³ªº±Ò°Ê¶µ¥Ø¡]¥]¬Aµù¥Uªí¡B¶}¾÷Àɮק¨¡BªA°Èµ¥¡^
    ¬yÄý¾¹¸ü¤J¶µ
    ¥¿¦b¹B¦æªº¶iµ{¡]¥]¬A¶iµ{¼Ò²Õ¸ê°T¡^
    ¤å¥óÃöÁp
    Winsock ´£¨ÑªÌ
    Autorun.inf
    HOSTS ¤å¥ó
    ¶iµ{¯SÅv±½´y


±Ò°Ê±M®×
µù¥Uªí
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Publisher]
    <foxy><; "C:\Program Files\Foxy\Foxy.exe" -tray>  [Foxy, Inc.]
    <MSMSGS><; "C:\Program Files\Messenger\msmsgs.exe" /background>  [(Verified)Microsoft Windows Publisher]
    <MSNShell><; C:\Program Files\msnshell\MSNShell.exe>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [(Verified)Microsoft Windows Publisher]
    <RTHDCPL><RTHDCPL.EXE>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <nwiz><nwiz.exe /install>  []
    <NvMediaCenter><RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <CJIMETIPSYNC><C:\Program Files\Common Files\Microsoft Shared\IME\IMTC65\CHANGJIE\CINTLCFG.EXE /CJIMETIPSync>  [(Verified)Microsoft Corporation]
    <PHIMETIPSYNC><C:\Program Files\Common Files\Microsoft Shared\IME\IMTC65\PHONETIC\TINTLCFG.EXE /PHIMETIPSync>  [(Verified)Microsoft Corporation]
    <QuickTime Task><; "C:\Program Files\QuickTime\qttask.exe" -atboottime>  [Apple Inc.]
    <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot>  [(Verified)"RealNetworks, Inc."]
    <ZoneAlarm Client><"C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe">  [(Verified)Check Point Software Technologies Ltd.]
    <iTunesHelper><; "C:\Program Files\iTunes\iTunesHelper.exe">  [(Verified)Apple Inc.]
    <LanguageShortcut><; "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe">  [(Verified)CyberLink]
    <RemoteControl><; "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe">  [(Verified)CyberLink]
    <ISTray><"C:\Program Files\Spyware Doctor\pctsTray.exe">  [(Verified)PC Tools]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Windows Publisher]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)PC Tools]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
    <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
    <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
    <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
    <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
    <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
    <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
    <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp.inf,PerUserStub>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
    <Address Book 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [N/A]

==================================
¶}¾÷Àɮק¨
N/A

==================================
ªA°È
[Apple Mobile Device / Apple Mobile Device][Stopped/Disabled]
  <"C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe"><Apple, Inc.>
[Bonjour ªA°È / Bonjour Service][Stopped/Disabled]
  <"C:\Program Files\Bonjour\mDNSResponder.exe"><Apple Inc.>
[Human Interface Device Access / HidServ][Stopped/Disabled]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[iPod Service / iPod Service][Stopped/Manual Start]
  <"C:\Program Files\iPod\bin\iPodService.exe"><Apple Inc.>
[NVIDIA Display Driver Service / NVSvc][Running/Auto Start]
  <C:\WINDOWS\System32\nvsvc32.exe><NVIDIA Corporation>
[PnkBstrA / PnkBstrA][Running/Auto Start]
  <C:\WINDOWS\system32\PnkBstrA.exe><N/A>
[Cyberlink RichVideo Service(CRVS) / RichVideo][Running/Auto Start]
  <"C:\Program Files\CyberLink\Shared Files\RichVideo.exe"><>
[PC Tools Auxiliary Service / sdAuxService][Running/Auto Start]
  <C:\Program Files\Spyware Doctor\pctsAuxs.exe><PC Tools>
[PC Tools Security Service / sdCoreService][Running/Auto Start]
  <C:\Program Files\Spyware Doctor\pctsSvc.exe><PC Tools>
[System Event loader / sysloader][Stopped/Auto Start]
  <"C:\Documents and Settings\All Users\Application Data\Microsoft\Office\SYSTEM\sysloader.exe"><Microsoft>
[TrueVector Internet Monitor / vsmon][Running/Auto Start]
  <C:\WINDOWS\system32\ZoneLabs\vsmon.exe -service><Zone Labs, LLC>
[Windows Advanced Manager / wamer][Stopped/Auto Start]
  <"C:\Program Files\Microsoft Office\SYSTEM\dodolook_7493.exe"><N/A>

==================================
ÅX°Êµ{¦¡
[GEARAspiWDM / GEARAspiWDM][Running/Manual Start]
  <System32\Drivers\GEARAspiWDM.sys><GEAR Software Inc.>
[gmer / gmer][Running/Manual Start]
  <System32\DRIVERS\gmer.sys><GMER>
[Microsoft UAA Bus Driver for High Definition Audio / HDAudBus][Running/Manual Start]
  <System32\DRIVERS\HDAudBus.sys><Windows (R) Server 2003 DDK provider>
[ida / ida8][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\ida8.sys><N/A>
[File Security Driver / IKFileSec][Running/Boot Start]
  <\SystemRoot\system32\drivers\ikfilesec.sys><PCTools Research Pty Ltd.>
[System Filter Driver / IKSysFlt][Running/System Start]
  <system32\drivers\iksysflt.sys><PCTools Research Pty Ltd.>
[System Security Driver / IKSysSec][Running/System Start]
  <system32\drivers\iksyssec.sys><PCTools Research Pty Ltd.>
[Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Running/Manual Start]
  <system32\drivers\RtkHDAud.sys><Realtek Semiconductor Corp.>
[KLIF / KLIF][Running/System Start]
  <system32\DRIVERS\klif.sys><Kaspersky Lab>
[NEC WMC USB_AD1 Composite Device driver (WDM) / marlbus][Stopped/Manual Start]
  <system32\DRIVERS\marlbus.sys><MCCI>
[NEC WMC USB_AD1 Modem Filter / marlmdfl][Stopped/Manual Start]
  <system32\DRIVERS\marlmdfl.sys><MCCI>
[NEC WMC USB_AD1 Modem Drivers / marlmdm][Stopped/Manual Start]
  <system32\DRIVERS\marlmdm.sys><MCCI>
[NEC WMC USB_AD1 OBEX Interface Drivers (WDM) / marlobex][Stopped/Manual Start]
  <system32\DRIVERS\marlobex.sys><MCCI>
[nv / nv][Running/Manual Start]
  <System32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[NVIDIA nForce Networking Controller Driver / NVENETFD][Running/Manual Start]
  <System32\DRIVERS\NVENETFD.sys><NVIDIA Corporation>
[NVIDIA Network Bus Enumerator / nvnetbus][Running/Manual Start]
  <System32\DRIVERS\nvnetbus.sys><NVIDIA Corporation>
[PciCon / PciCon][Stopped/Manual Start]
  <\??\D:\PciCon.sys><N/A>
[ª½±µ¥­¦æ³s±µ°ð³sµ²ÅX°Êµ{¦¡ / Ptilink][Running/Manual Start]
  <System32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Secdrv / Secdrv][Stopped/Manual Start]
  <System32\DRIVERS\secdrv.sys><N/A>
[sptd / sptd][Running/Boot Start]
  <\SystemRoot\System32\Drivers\sptd.sys><N/A>
[srescan / srescan][Running/Boot Start]
  <\SystemRoot\system32\ZoneLabs\srescan.sys><Zone Labs, LLC>
[LGE Mobile Composite USB Device / usbbus][Stopped/Manual Start]
  <system32\DRIVERS\lgusbbus.sys><LG Electronics Inc.>
[LGE Mobile USB Serial Port / UsbDiag][Stopped/Manual Start]
  <system32\DRIVERS\lgusbdiag.sys><LG Electronics Inc.>
[LGE Mobile USB Modem / USBModem][Stopped/Manual Start]
  <system32\DRIVERS\lgusbmodem.sys><LG Electronics Inc.>
[vsdatant / vsdatant][Running/System Start]
  <System32\vsdatant.sys><Zone Labs, LLC>

==================================
¬yÄý¾¹¸ü¤J¶µ
[AcroIEHlprObj Class]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx, >
[CAdLogic Object]
  {11F09AFD-75AD-4E51-AB43-E09E9351CE16} <C:\Program Files\Common Files\CPUSH\cpush.dll, >
[AddTask Class]
  {24F06550-65E3-4D1C-8CFE-839C296B5530} <C:\Program Files\eREAD6.0\IEeREAD.dll, >
[FGCatchUrl]
  {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} <C:\Program Files\FlashGet\jccatch.dll, www.flashget.com>
[BitComet Helper]
  {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} <C:\Program Files\BitComet\tools\BitCometBHO_1.1.11.30.dll, BitComet>
[Adobe Common Objects]
  {C86488AF-13D5-4FEF-9DDF-9FB88698CFC1} <C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\USERDATA\F6GAVYk9RA.dll, Microsoft Corporation>
[FlashGet GetFlash Class]
  {F156768E-81EF-470C-9057-481BA8380DBA} <C:\Program Files\FlashGet\getflash.dll, www.flashget.com>
[°Ñ¦Ò¸ê®Æ(&R)]
  {92780B25-18CC-41C8-B9BE-3C9C571A8263} <C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL, Microsoft Corporation>
[BitComet]
  {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} <, N/A>
[FlashGet]
  {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <C:\Program Files\FlashGet\FlashGet.exe, FlashGet.com>
[Messenger]
  {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[F-Secure Online Scanner 3.1]
  {0B79F48A-E8D6-11DB-9283-E25056D89593} <C:\WINDOWS\Downloaded Program Files\fscax.dll, F-Secure Corporation>
[Automatic Driver Installation Control]
  {25365FF3-2746-4230-9DA7-163CCA318309} <C:\WINDOWS\System32\gtdownlr_134.ocx, Gteko Ltd.>
[DataStorage Class]
  {3AC7F64E-6154-47B0-82B5-764ED4077F77} <C:\WINDOWS\DOWNLO~1\DATAST~1.DLL, The Hong Kong Jockey Club>
[WUWebControl Class]
  {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation>
[DivXBrowserPlugin Object]
  {67DABFBF-D0AB-41FA-9C46-CC0F21721616} <C:\Program Files\DivX\DivX Web Player\npdivx32.dll, DivX,Inc.>
[Windows Live Photo Upload Control]
  {7FC1B346-83E6-4774-8D20-1A6B09B0E737} <C:\WINDOWS\Downloaded Program Files\MsnPUpld.dll, MicrosoftR Corporation>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\Macromed\Flash\Flash9e.ocx, Adobe Systems, Inc.>
[AcroIEHlprObj Class]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx, >
[Web Browser Applet Control]
  {08B0E5C0-4FCB-11CF-AAA5-00401C608501} <C:\WINDOWS\System32\msjava.dll, Microsoft Corporation>
[F-Secure Online Scanner 3.1]
  {0B79F48A-E8D6-11DB-9283-E25056D89593} <C:\WINDOWS\Downloaded Program Files\fscax.dll, F-Secure Corporation>
[CAdLogic Object]
  {11F09AFD-75AD-4E51-AB43-E09E9351CE16} <C:\Program Files\Common Files\CPUSH\cpush.dll, >
[Shockwave ActiveX Control]
  {166B1BCA-3F9C-11CF-8075-444553540000} <C:\WINDOWS\system32\Macromed\Director\SwDir.dll, Macromedia, Inc.>
[Windows Media Player]
  {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[AddTask Class]
  {24F06550-65E3-4D1C-8CFE-839C296B5530} <C:\Program Files\eREAD6.0\IEeREAD.dll, >
[HTML Document]
  {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\System32\mshtml.dll, N/A>
[DHTML Edit Control Safe for Scripting for IE5]
  {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, Microsoft Corporation>
[FGCatchUrl]
  {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} <C:\Program Files\FlashGet\jccatch.dll, www.flashget.com>
[HtmlDlgSafeHelper Class]
  {3050F819-98B5-11CF-BB82-00AA00BDCE0B} <C:\WINDOWS\System32\mshtmled.dll, Microsoft Corporation>
[BitComet Helper]
  {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} <C:\Program Files\BitComet\tools\BitCometBHO_1.1.11.30.dll, BitComet>
[DataStorage Class]
  {3AC7F64E-6154-47B0-82B5-764ED4077F77} <C:\WINDOWS\DOWNLO~1\DATAST~1.DLL, The Hong Kong Jockey Club>
[QuickTime Object]
  {4063BE15-3B08-470D-A0D5-B37161CFFD69} <C:\Program Files\QuickTime\QTPlugin.ocx, Apple Inc.>
[Windows Media Player]
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[Microsoft Web Browser]
  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\System32\shdocvw.dll, Microsoft Corporation>
[SecureX Class]
  {8A4943CC-1950-44F9-9045-D3D428FD3948} <C:\WINDOWS\DOWNLO~1\TNSSPPC.dll, The Hong Kong Jockey Club>
[SearchAssistantOC]
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\System32\shdocvw.dll, N/A>
[RDS.DataSpace]
  {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
[Adobe Common Objects]
  {C86488AF-13D5-4FEF-9DDF-9FB88698CFC1} <C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\USERDATA\F6GAVYk9RA.dll, Microsoft Corporation>
[Adobe Acrobat Control for ActiveX]
  {CA8A9780-280D-11CF-A24D-444553540000} <C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\ActiveX\pdf.ocx, Adobe Systems Incorporated>
[VIDEO__X_MS_WMV Moniker Class]
  {CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\Macromed\Flash\Flash9e.ocx, Adobe Systems, Inc.>
[FlashGet GetFlash Class]
  {F156768E-81EF-470C-9057-481BA8380DBA} <C:\Program Files\FlashGet\getflash.dll, www.flashget.com>
[FGAutoLive]
  {F90D830D-C175-4bbe-82C7-FF94669A4C42} <C:\Program Files\FlashGet\fgupdate.dll, www.flashget.com>
[FGCatchUrl]
  {FB5DA724-162B-11D3-8B9B-AA70B4B0B524} <C:\Program Files\FlashGet\jccatch.dll, www.flashget.com>
[&¨Ï¥Î FlashGet ¤U¸ü]
  <C:\Program Files\FlashGet\jc_link.htm, N/A>
[&¨Ï¥ÎBitComet¤U¸ü¥»­¶µø°T]
  <res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm, N/A>
[&¥þ³¡¨Ï¥Î FlashGet ¤U¸ü]
  <C:\Program Files\FlashGet\jc_all.htm, N/A>
[Foxy ¤U¸ü]
  <res://C:\Program Files\Foxy\Foxy.exe/download.htm, N/A>
[Foxy ·j´M]
  <res://C:\Program Files\Foxy\Foxy.exe/search.htm, N/A>
[¨Ï¥ÎBitComet¤U¸ü¥þ³¡³sµ²]
  <res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm, N/A>
[¨Ï¥ÎBitComet¤U¸ü³sµ²(&B)]
  <res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm, N/A>
[¶×¥X¦Ü Microsoft Office Excel(&X)]
  <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
[ʹÓÿ쳵(FlashGet2)ÏÂÔØ]
  <C:\Documents and Settings\Administrator\®à­±\FlashGetX\FGX_LINK.HTM, N/A>
[ʹÓÿ쳵(FlashGet2)ÏÂÔØÈ«²¿Á´½Ó]
  <C:\Documents and Settings\Administrator\®à­±\FlashGetX\FGX_ALL.HTM, N/A>

==================================
¥¿¦b¹B¦æªº¶iµ{
[PID: 684 / SYSTEM][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 748 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Spyware Doctor\smumhook.dll]  [PC Tools, 5.5.0.50]
    [C:\Program Files\Spyware Doctor\klg.dat]  [PC Tools, 5.5.0.1]
[PID: 772 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\Program Files\Spyware Doctor\smumhook.dll]  [PC Tools, 5.5.0.50]
    [C:\Program Files\Spyware Doctor\klg.dat]  [PC Tools, 5.5.0.1]
[PID: 816 / SYSTEM][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Documents and Settings\All Users\Application Data\Microsoft\Office\SYSTEM\finder.dll]  [Microsoft, 3, 1, 4, 0]
    [C:\Program Files\Spyware Doctor\smumhook.dll]  [PC Tools, 5.5.0.50]
    [C:\Program Files\Spyware Doctor\klg.dat]  [PC Tools, 5.5.0.1]
[PID: 828 / SYSTEM][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Spyware Doctor\smumhook.dll]  [PC Tools, 5.5.0.50]
    [C:\Program Files\Spyware Doctor\klg.dat]  [PC Tools, 5.5.0.1]
[PID: 1008 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Spyware Doctor\smumhook.dll]  [PC Tools, 5.5.0.50]
    [C:\Program Files\Spyware Doctor\klg.dat]  [PC Tools, 5.5.0.1]
[PID: 1052 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Inc., 1,0,4,12]
    [C:\Program Files\Spyware Doctor\smumhook.dll]  [PC Tools, 5.5.0.50]
    [C:\Program Files\Spyware Doctor\klg.dat]  [PC Tools, 5.5.0.1]
[PID: 1148 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Spyware Doctor\smumhook.dll]  [PC Tools, 5.5.0.50]
    [C:\Program Files\Spyware Doctor\klg.dat]  [PC Tools, 5.5.0.1]
    [C:\WINDOWS\system32\wups2.dll]  [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)]
[PID: 1240 / NETWORK SERVICE][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Spyware Doctor\smumhook.dll]  [PC Tools, 5.5.0.50]
    [C:\Program Files\Spyware Doctor\klg.dat]  [PC Tools, 5.5.0.1]
[PID: 1384 / SYSTEM][C:\WINDOWS\system32\ZoneLabs\vsmon.exe]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\VSUTIL.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\VSINIT.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\zpeng24.dll]  [Python Software Foundation, 2.4.2]
    [C:\WINDOWS\system32\ZoneLabs\dbghelp.dll]  [Microsoft Corporation, 6.2.0013.1 (DbgBuild.030619-2209)]
    [C:\WINDOWS\system32\zonelabs\lib\pyd\signedDll.pyd]  [N/A, ]
    [C:\WINDOWS\system32\zonelabs\lib\pyd\pyvsinit.pyd]  [N/A, ]
    [C:\WINDOWS\system32\zonelabs\lib\pyd\pyexpat.pyd]  [N/A, ]
    [C:\WINDOWS\system32\zonelabs\lib\pyd\_socket.pyd]  [N/A, ]
    [C:\WINDOWS\system32\ZoneLabs\plugins\vsmon_plugin\vsmon_plugin.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\ZoneLabs\plugins\rpc_server\rpc_server.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\ZoneLabs\vsmondll.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\VSDATA.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\ZoneLabs\ssleay32.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\vsxml.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\ZoneLabs\fbl.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\zlcomm.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\ZLCommDB.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\ZoneLabs\vsdb.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\ZoneLabs\VSRULEDB.DLL]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\ZoneLabs\vsvault.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\vswmi.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\ZoneLabs\av.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\ZoneLabs\avsys\kave.dll]  [Kaspersky Lab., 5, 0, 1, 82]
    [C:\WINDOWS\system32\ZoneLabs\avsys\inv.dll]  [N/A, ]
    [C:\WINDOWS\system32\ZoneLabs\imsecure.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\ZoneLabs\avsys\FSSync.dll]  [Kaspersky Lab, 6.0.5.678]
    [C:\WINDOWS\system32\ZoneLabs\zlquarantine.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\ZoneLabs\qrbase.dll]  [Zone Labs, LLC, 5, 0, 189, 0]
    [C:\WINDOWS\system32\ZoneLabs\scheduler.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\ZoneLabs\zlsre.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\ZoneLabs\srescan.dll]  [Zone Labs, LLC, 5, 0, 189, 0]
    [C:\WINDOWS\system32\ZoneLabs\zlupdate.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\ZoneLabs\streamapi\httpblocker\httpblocker.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\LIBEAY32_0.9.6l.dll]  [N/A, ]
    [C:\WINDOWS\system32\ZoneLabs\streamapi\imslsp\imslsp.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\ZoneLabs\camupd.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Inc., 1,0,4,12]
    [C:\WINDOWS\system32\ZoneLabs\vsavpro.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\Program Files\Spyware Doctor\smumhook.dll]  [PC Tools, 5.5.0.50]
    [C:\Program Files\Spyware Doctor\klg.dat]  [PC Tools, 5.5.0.1]
[PID: 1596 / Administrator][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Spyware Doctor\smumhook.dll]  [PC Tools, 5.5.0.50]
    [C:\Program Files\Spyware Doctor\klg.dat]  [PC Tools, 5.5.0.1]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx]  [, 1, 0, 0, 1]
    [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
[PID: 1828 / SYSTEM][C:\WINDOWS\system32\ZoneLabs\avsys\ScanningProcess.exe]  [N/A, ]
    [C:\WINDOWS\system32\ZoneLabs\avsys\fssync.dll]  [Kaspersky Lab, 6.0.5.678]
    [C:\WINDOWS\system32\ZoneLabs\avsys\prloader.dll]  [Kaspersky Lab, 6.0.2.678]
    [C:\WINDOWS\system32\ZoneLabs\avsys\prkernel.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\avpmgr.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\wdiskio.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\nfio.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\fsdrvplg.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\avlib.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\dtreg.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\prutil.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\avp1.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\l_llio.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\ichk2.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\sfdb.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\ichksa.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\mkavio.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\hashmd5.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\hashcont.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\hccmp.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\iwgen.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\uniarc.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\minizip.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\cab.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\arj.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\rar.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\lha.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\mdb.ppl]  [Kaspersky Lab, 6.0.2.678]
    [C:\WINDOWS\system32\MAPI32.dll]  [Microsoft Corporation, 1.0.2536.0 (XPClient.010817-1148)]
    [c:\windows\system32\zonelabs\avsys\msoe.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\tempfile.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\avpgs.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\thpimpl.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\dmap.ppl]  [Kaspersky Lab, 6.0.2.678]
    [C:\Program Files\Spyware Doctor\smumhook.dll]  [PC Tools, 5.5.0.50]
    [C:\Program Files\Spyware Doctor\klg.dat]  [PC Tools, 5.5.0.1]
[PID: 1900 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\CNMLM47.DLL]  [CANON INC., 1.90.3.90]
    [C:\WINDOWS\system32\mdimon.dll]  [Microsoft Corporation, 11.3.2175.0]
    [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\CNMPD47.DLL]  [CANON INC., 1.90.3.90]
    [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll]  [Microsoft Corporation, 11.3.2175.0]
    [C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Inc., 1,0,4,12]
    [C:\Program Files\Spyware Doctor\smumhook.dll]  [PC Tools, 5.5.0.50]
    [C:\Program Files\Spyware Doctor\klg.dat]  [PC Tools, 5.5.0.1]
[PID: 272 / SYSTEM][C:\WINDOWS\system32\ZoneLabs\avsys\ScanningProcess.exe]  [N/A, ]
    [C:\WINDOWS\system32\ZoneLabs\avsys\fssync.dll]  [Kaspersky Lab, 6.0.5.678]
    [C:\WINDOWS\system32\ZoneLabs\avsys\prloader.dll]  [Kaspersky Lab, 6.0.2.678]
    [C:\WINDOWS\system32\ZoneLabs\avsys\prkernel.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\avpmgr.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\wdiskio.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\nfio.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\fsdrvplg.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\avlib.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\dtreg.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\prutil.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\avp1.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\l_llio.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\ichk2.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\sfdb.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\ichksa.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\mkavio.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\hashmd5.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\hashcont.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\hccmp.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\iwgen.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\uniarc.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\minizip.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\cab.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\arj.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\rar.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\lha.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\mdb.ppl]  [Kaspersky Lab, 6.0.2.678]
    [C:\WINDOWS\system32\MAPI32.dll]  [Microsoft Corporation, 1.0.2536.0 (XPClient.010817-1148)]
    [c:\windows\system32\zonelabs\avsys\msoe.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\tempfile.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\avpgs.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\thpimpl.ppl]  [Kaspersky Lab, 6.0.2.678]
    [c:\windows\system32\zonelabs\avsys\dmap.ppl]  [Kaspersky Lab, 6.0.2.678]
    [C:\Program Files\Spyware Doctor\smumhook.dll]  [PC Tools, 5.5.0.50]
    [C:\Program Files\Spyware Doctor\klg.dat]  [PC Tools, 5.5.0.1]
[PID: 468 / SYSTEM][C:\WINDOWS\System32\nvsvc32.exe]  [NVIDIA Corporation, 6.14.11.6218]
    [C:\WINDOWS\System32\nvapi.dll]  [NVIDIA Corporation, 6.14.11.6218]
    [C:\Program Files\Spyware Doctor\smumhook.dll]  [PC Tools, 5.5.0.50]
    [C:\Program Files\Spyware Doctor\klg.dat]  [PC Tools, 5.5.0.1]
[PID: 480 / SYSTEM][C:\WINDOWS\system32\PnkBstrA.exe]  [N/A, ]
    [C:\Program Files\Spyware Doctor\smumhook.dll]  [PC Tools, 5.5.0.50]
    [C:\Program Files\Spyware Doctor\klg.dat]  [PC Tools, 5.5.0.1]
[PID: 524 / SYSTEM][C:\Program Files\CyberLink\Shared Files\RichVideo.exe]  [, 1.1.0808  ]
    [C:\Program Files\Spyware Doctor\smumhook.dll]  [PC Tools, 5.5.0.50]
    [C:\Program Files\Spyware Doctor\klg.dat]  [PC Tools, 5.5.0.1]
[PID: 636 / SYSTEM][C:\Program Files\Spyware Doctor\pctsAuxs.exe]  [PC Tools, 5.5.0.37]
    [C:\Program Files\Spyware Doctor\SysAccess.dll]  [PC Tools, 5.5.0.2]
    [C:\Program Files\Spyware Doctor\rtl100.bpl]  [Borland Software Corporation, 10.0.2288.42451]
    [C:\Program Files\Spyware Doctor\ikdll.dll]  [PCTools Research Pty Ltd., 5.0.2.1039 built by: WinDDK]
    [C:\Program Files\Spyware Doctor\smumhook.dll]  [PC Tools, 5.5.0.50]
    [C:\Program Files\Spyware Doctor\klg.dat]  [PC Tools, 5.5.0.1]
[PID: 792 / SYSTEM][C:\Program Files\Spyware Doctor\pctsSvc.exe]  [PC Tools, 5.5.0.68]
    [C:\Program Files\Spyware Doctor\rtl100.bpl]  [Borland Software Corporation, 10.0.2288.42451]
    [C:\Program Files\Spyware Doctor\vcl100.bpl]  [Borland Software Corporation, 10.0.2288.42451]
    [C:\Program Files\Spyware Doctor\SysAccess.dll]  [PC Tools, 5.5.0.2]
    [C:\Program Files\Spyware Doctor\ikdll.dll]  [PCTools Research Pty Ltd., 5.0.2.1039 built by: WinDDK]
    [C:\Program Files\Spyware Doctor\CommOM.dll]  [PC Tools, 5.5.0.28]
    [C:\Program Files\Spyware Doctor\CommLib.dll]  [PC Tools, 5.5.0.33]
    [C:\Program Files\Spyware Doctor\commhlpr.dll]  [PC Tools, 5.5.0.7]
    [C:\Program Files\Spyware Doctor\RegHelper.dll]  [PC Tools, 5.5.0.1]
    [C:\Program Files\Spyware Doctor\inethlpr.dll]  [PC Tools, 5.5.0.65]
    [C:\Program Files\Spyware Doctor\filehlpr.dll]  [PC Tools, 5.5.0.37]
    [C:\Program Files\Spyware Doctor\sdcore.dll]  [PC Tools, 5.5.0.49]
    [C:\Program Files\Spyware Doctor\FileStorage.sdp]  [PC Tools, 5.5.0.22]
    [C:\Program Files\Spyware Doctor\Settings.sdp]  [PC Tools, 5.5.0.34]
    [C:\Program Files\Spyware Doctor\IDBLib.sdp]  [PC Tools, 5.5.0.25]
    [C:\Program Files\Spyware Doctor\SDInfo.sdp]  [PC Tools, 5.5.0.46]
    [C:\Program Files\Spyware Doctor\SDExtra.sdp]  [PC Tools, 5.5.0.43]
    [C:\Program Files\Spyware Doctor\PCTWSC.dll]  [PC Tools, 1, 0, 0, 10]
    [C:\Program Files\Spyware Doctor\Immunizer.sdp]  [PC Tools, 5.5.0.36]
    [C:\Program Files\Spyware Doctor\Localizer.sdp]  [PC Tools, 5.5.0.27]
    [C:\Program Files\Spyware Doctor\NfyMan.sdp]  [PC Tools, 5.5.0.23]
    [C:\Program Files\Spyware Doctor\quarantine.sdp]  [PC Tools, 5.5.0.3]
    [C:\Program Files\Spyware Doctor\BH.dll]  [PC Tools, 5.5.0.6]
    [C:\Program Files\Spyware Doctor\RebootManager.sdp]  [PC Tools, 5.5.0.8]
    [C:\Program Files\Spyware Doctor\scaneng.sdp]  [PC Tools, 5.5.0.48]
    [C:\Program Files\Spyware Doctor\stasks.sdp]  [PC Tools, 5.5.0.1]
    [C:\Program Files\Spyware Doctor\SystemMonitor.sdp]  [PC Tools, 5.5.0.66]
    [C:\Program Files\Spyware Doctor\whitelist.sdp]  [PC Tools, 5.5.0.1]
    [C:\Program Files\Spyware Doctor\plugins\Browsers.SDP]  [PC Tools, 5.5.0.43]
    [C:\Program Files\Spyware Doctor\plugins\cookie.sdp]  [PC Tools, 5.5.0.3]
    [C:\Program Files\Spyware Doctor\plugins\grfiles.SDP]  [PC Tools, 5.5.0.46]
    [C:\Program Files\Spyware Doctor\plugins\grImmunizer.SDP]  [PC Tools, 5.5.0.2]
    [C:\Program Files\Spyware Doctor\plugins\grregistry.SDP]  [PC Tools, 5.5.0.34]
    [C:\Program Files\Spyware Doctor\PCToolsComponents.bpl]  [PC Tools, 5.5.0.5]
    [C:\Program Files\Spyware Doctor\SH.dll]  [PC Tools, 5.5.0.6]
    [C:\Program Files\Spyware Doctor\plugins\KLGuard.SDP]  [PC Tools, 5.5.0.3]
    [C:\Program Files\Spyware Doctor\plugins\Network.SDP]  [PC Tools, 5.5.0.35]
    [C:\Program Files\Spyware Doctor\plugins\Process.SDP]  [PC Tools, 5.5.0.41]
    [C:\Program Files\Spyware Doctor\plugins\ScriptEngine.SDP]  [PC Tools, 5.5.0.37]
    [C:\Program Files\Spyware Doctor\plugins\SDNET.SDP]  [PC Tools, 5.5.0.34]
    [C:\Program Files\Spyware Doctor\plugins\StartUp.SDP]  [PC Tools, 5.5.0.9]
[PID: 1120 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\System32\CNQU70.DLL]  [CANON INC., 1, 0, 0, 7]
    [C:\WINDOWS\system32\N067UFW.DLL]  [CANON INC., 2.07]
    [C:\Program Files\Spyware Doctor\smumhook.dll]  [PC Tools, 5.5.0.50]
    [C:\Program Files\Spyware Doctor\klg.dat]  [PC Tools, 5.5.0.1]
[PID: 1216 / Administrator][C:\Program Files\Spyware Doctor\pctsTray.exe]  [PC Tools, 5.5.0.51]
    [C:\Program Files\Spyware Doctor\rtl100.bpl]  [Borland Software Corporation, 10.0.2288.42451]
    [C:\Program Files\Spyware Doctor\vcl100.bpl]  [Borland Software Corporation, 10.0.2288.42451]
    [C:\Program Files\Spyware Doctor\SysAccess.dll]  [PC Tools, 5.5.0.2]
    [C:\Program Files\Spyware Doctor\ikdll.dll]  [PCTools Research Pty Ltd., 5.0.2.1039 built by: WinDDK]
    [C:\Program Files\Spyware Doctor\CommOM.dll]  [PC Tools, 5.5.0.28]
    [C:\Program Files\Spyware Doctor\CommLib.dll]  [PC Tools, 5.5.0.33]
    [C:\Program Files\Spyware Doctor\PCToolsComponents.bpl]  [PC Tools, 5.5.0.5]
    [C:\Program Files\Spyware Doctor\sdinfo.sdp]  [PC Tools, 5.5.0.46]
    [C:\Program Files\Spyware Doctor\cdialogs.dll]  [PC Tools, 5.5.0.14]
    [C:\Program Files\Spyware Doctor\pwindow.dll]  [PC Tools, 5.5.0.12]
    [C:\Program Files\Spyware Doctor\smumhook.dll]  [PC Tools, 5.5.0.50]
    [C:\Program Files\Spyware Doctor\klg.dat]  [PC Tools, 5.5.0.1]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 2512 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Spyware Doctor\smumhook.dll]  [PC Tools, 5.5.0.50]
    [C:\Program Files\Spyware Doctor\klg.dat]  [PC Tools, 5.5.0.1]
[PID: 2632 / SYSTEM][C:\WINDOWS\system32\wscntfy.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Spyware Doctor\smumhook.dll]  [PC Tools, 5.5.0.50]
    [C:\Program Files\Spyware Doctor\klg.dat]  [PC Tools, 5.5.0.1]
[PID: 2804 / Administrator][C:\WINDOWS\RTHDCPL.EXE]  [Realtek Semiconductor Corp., 2.1.4.2]
    [C:\Program Files\Spyware Doctor\smumhook.dll]  [PC Tools, 5.5.0.50]
    [C:\Program Files\Spyware Doctor\klg.dat]  [PC Tools, 5.5.0.1]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 2900 / Administrator][C:\WINDOWS\ALCFDRTM.EXE]  [Realtek Semiconductor Corp., 1, 3, 0, 1]
    [C:\Program Files\Spyware Doctor\smumhook.dll]  [PC Tools, 5.5.0.50]
    [C:\Program Files\Spyware Doctor\klg.dat]  [PC Tools, 5.5.0.1]
[PID: 2984 / Administrator][C:\WINDOWS\system32\RUNDLL32.EXE]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Spyware Doctor\smumhook.dll]  [PC Tools, 5.5.0.50]
    [C:\Program Files\Spyware Doctor\klg.dat]  [PC Tools, 5.5.0.1]
    [C:\WINDOWS\System32\NvMcTray.dll]  [NVIDIA Corporation, 6.14.11.6218]
    [C:\WINDOWS\system32\nvapi.dll]  [NVIDIA Corporation, 6.14.11.6218]
    [C:\WINDOWS\system32\NVRSZHT.DLL]  [NVIDIA Corporation, 6.14.11.6218]
[PID: 3040 / Administrator][C:\Program Files\Common Files\Real\Update_OB\realsched.exe]  [RealNetworks, Inc., 0.1.0.4279]
    [C:\Program Files\Spyware Doctor\smumhook.dll]  [PC Tools, 5.5.0.50]
    [C:\Program Files\Spyware Doctor\klg.dat]  [PC Tools, 5.5.0.1]
[PID: 3056 / Administrator][C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\VSUTIL.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\VSINIT.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\VSPUBAPI.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\Program Files\Zone Labs\ZoneAlarm\framewrk.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\zpeng24.dll]  [Python Software Foundation, 2.4.2]
    [C:\WINDOWS\system32\ZoneLabs\dbghelp.dll]  [Microsoft Corporation, 6.2.0013.1 (DbgBuild.030619-2209)]
    [C:\Program Files\Spyware Doctor\smumhook.dll]  [PC Tools, 5.5.0.50]
    [C:\Program Files\Spyware Doctor\klg.dat]  [PC Tools, 5.5.0.1]
    [C:\WINDOWS\system32\ZoneLabs\fbl.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\vsdata.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\vsxml.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\ZoneLabs\lib\pyd\zpui.pyd]  [, 1, 0, 0, 0]
    [C:\WINDOWS\system32\ZoneLabs\lib\pyd\pyexpat.pyd]  [N/A, ]
    [C:\WINDOWS\system32\vsmonapi.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\zlcomm.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\ZLCommDB.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\ZoneLabs\scheduler.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\Program Files\Zone Labs\ZoneAlarm\alert.zap]  [Zone Labs, LLC, 7.0.462.000]
    [C:\Program Files\Zone Labs\ZoneAlarm\email.zap]  [Zone Labs, LLC, 7.0.462.000]
    [C:\Program Files\Zone Labs\ZoneAlarm\filter.zap]  [Zone Labs, LLC, 7.0.462.000]
    [C:\Program Files\Zone Labs\ZoneAlarm\firewall.zap]  [Zone Labs, LLC, 7.0.462.000]
    [C:\Program Files\Zone Labs\ZoneAlarm\idlock.zap]  [Zone Labs, LLC, 7.0.462.000]
    [C:\Program Files\Zone Labs\ZoneAlarm\imsecure.zap]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\LIBEAY32_0.9.6l.dll]  [N/A, ]
    [C:\Program Files\Zone Labs\ZoneAlarm\privacy.zap]  [Zone Labs, LLC, 7.0.462.000]
    [C:\Program Files\Zone Labs\ZoneAlarm\programs.zap]  [Zone Labs, LLC, 7.0.462.000]
    [C:\Program Files\Zone Labs\ZoneAlarm\scan.zap]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\ZoneLabs\av.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\Program Files\Zone Labs\ZoneAlarm\security.zap]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\ZoneLabs\zlsre.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\ZoneLabs\camupd.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\ZoneLabs\zlparser.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\WINDOWS\system32\ZoneLabs\imsecure.dll]  [Zone Labs, LLC, 7.0.462.000]
    [C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Inc., 1,0,4,12]
    [C:\WINDOWS\system32\ZoneLabs\zlupdate.dll]  [Zone Labs, LLC, 7.0.462.000]
[PID: 3132 / Administrator][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Spyware Doctor\smumhook.dll]  [PC Tools, 5.5.0.50]
    [C:\Program Files\Spyware Doctor\klg.dat]  [PC Tools, 5.5.0.1]
[PID: 3284 / Administrator][C:\Program Files\internet explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Spyware Doctor\smumhook.dll]  [PC Tools, 5.5.0.50]
    [C:\Program Files\Spyware Doctor\klg.dat]  [PC Tools, 5.5.0.1]
    [C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx]  [, 1, 0, 0, 1]
    [C:\Program Files\eREAD6.0\IEeREAD.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\eREAD6.0\MFC80U.DLL]  [Microsoft Corporation, 8.00.50727.42]
    [C:\Program Files\FlashGet\jccatch.dll]  [www.flashget.com, 1, 8, 4, 1007]
    [C:\Program Files\BitComet\tools\BitCometBHO_1.1.11.30.dll]  [BitComet, 20071130]
    [C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\USERDATA\F6GAVYk9RA.dll]  [Microsoft Corporation, 3, 1, 8, 0]
    [C:\Program Files\FlashGet\getflash.dll]  [www.flashget.com, 1, 8, 4, 1003]
    [C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Inc., 1,0,4,12]
    [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\WINDOWS\System32\Macromed\Flash\Flash9e.ocx]  [Adobe Systems, Inc., 9,0,115,0]
[PID: 960 / Administrator][C:\Program Files\internet explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Spyware Doctor\smumhook.dll]  [PC Tools, 5.5.0.50]
    [C:\Program Files\Spyware Doctor\klg.dat]  [PC Tools, 5.5.0.1]
    [C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx]  [, 1, 0, 0, 1]
    [C:\Program Files\eREAD6.0\IEeREAD.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\eREAD6.0\MFC80U.DLL]  [Microsoft Corporation, 8.00.50727.42]
    [C:\Program Files\FlashGet\jccatch.dll]  [www.flashget.com, 1, 8, 4, 1007]
    [C:\Program Files\BitComet\tools\BitCometBHO_1.1.11.30.dll]  [BitComet, 20071130]
    [C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\USERDATA\F6GAVYk9RA.dll]  [Microsoft Corporation, 3, 1, 8, 0]
    [C:\Program Files\FlashGet\getflash.dll]  [www.flashget.com, 1, 8, 4, 1003]
    [C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Inc., 1,0,4,12]
    [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\WINDOWS\System32\Macromed\Flash\Flash9e.ocx]  [Adobe Systems, Inc., 9,0,115,0]
    [C:\WINDOWS\system32\Macromed\Common\SwSupport.dll]  [Macromedia, Inc., 8.5.1r102]
[PID: 572 / Administrator][C:\Program Files\Spyware Doctor\update.exe]  [PC Tools, 2.6.0.2070]
    [C:\Program Files\Spyware Doctor\smumhook.dll]  [PC Tools, 5.5.0.50]
    [C:\Program Files\Spyware Doctor\klg.dat]  [PC Tools, 5.5.0.1]
    [C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Inc., 1,0,4,12]
[PID: 1544 / Administrator][C:\Documents and Settings\Administrator\®à­±\systools\kztechssuite\SREngPS.EXE]  [Smallfrogs Studio, 2.5.16.900]
    [C:\Program Files\Spyware Doctor\smumhook.dll]  [PC Tools, 5.5.0.50]
    [C:\Program Files\Spyware Doctor\klg.dat]  [PC Tools, 5.5.0.1]
    [C:\Documents and Settings\Administrator\®à­±\systools\kztechssuite\Lang\1028.DLL]  [System Repair Engineer, 2.5.16.900]
    [C:\Documents and Settings\Administrator\®à­±\systools\kztechssuite\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]
    [C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Inc., 1,0,4,12]

==================================
¤å¥óÃöÁp
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock ´£¨ÑªÌ
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS ¤å¥ó
127.0.0.1       localhost

==================================
¶iµ{¯SÅv±½´y
¯S®í¯SÅv³Q¤¹³\¡G SeLoadDriverPrivilege [PID = 1828, C:\WINDOWS\SYSTEM32\ZONELABS\AVSYS\SCANNINGPROCESS.EXE]
¯S®í¯SÅv³Q¤¹³\¡G SeSystemtimePrivilege [PID = 1828, C:\WINDOWS\SYSTEM32\ZONELABS\AVSYS\SCANNINGPROCESS.EXE]
¯S®í¯SÅv³Q¤¹³\¡G SeLoadDriverPrivilege [PID = 272, C:\WINDOWS\SYSTEM32\ZONELABS\AVSYS\SCANNINGPROCESS.EXE]
¯S®í¯SÅv³Q¤¹³\¡G SeSystemtimePrivilege [PID = 272, C:\WINDOWS\SYSTEM32\ZONELABS\AVSYS\SCANNINGPROCESS.EXE]
¯S®í¯SÅv³Q¤¹³\¡G SeLoadDriverPrivilege [PID = 524, C:\PROGRAM FILES\CYBERLINK\SHARED FILES\RICHVIDEO.EXE]
¯S®í¯SÅv³Q¤¹³\¡G SeSystemtimePrivilege [PID = 524, C:\PROGRAM FILES\CYBERLINK\SHARED FILES\RICHVIDEO.EXE]
¯S®í¯SÅv³Q¤¹³\¡G SeSystemtimePrivilege [PID = 2900, C:\WINDOWS\ALCFDRTM.EXE]
¯S®í¯SÅv³Q¤¹³\¡G SeDebugPrivilege [PID = 2900, C:\WINDOWS\ALCFDRTM.EXE]
¯S®í¯SÅv³Q¤¹³\¡G SeLoadDriverPrivilege [PID = 2900, C:\WINDOWS\ALCFDRTM.EXE]
¯S®í¯SÅv³Q¤¹³\¡G SeSystemtimePrivilege [PID = 572, C:\PROGRAM FILES\SPYWARE DOCTOR\UPDATE.EXE]
¯S®í¯SÅv³Q¤¹³\¡G SeDebugPrivilege [PID = 572, C:\PROGRAM FILES\SPYWARE DOCTOR\UPDATE.EXE]
¯S®í¯SÅv³Q¤¹³\¡G SeLoadDriverPrivilege [PID = 572, C:\PROGRAM FILES\SPYWARE DOCTOR\UPDATE.EXE]

==================================
API HOOK
¤J¤fÂI¿ù»~¡GFreeLibrary (¦MÀIµ¥¯Å: °ª,  ³Q¤UÄѼҲթÒHOOK: 0x7170002D)

==================================
ÁôÂöiµ{
N/A

==================================


[/CODE]