02/25/2012  9:55 PM	START_Alert	MACHINE_RUN	O&O Defrag	D:\DEVICE\O&O DEFRAG\OODTRAY.EXE	O&O Defrag TrayIcon (Win32)
02/25/2012  9:55 PM	*START_Remove	MACHINE_RUN	OODefragTray	D:\Device\O&O Defrag\oodtray.exe	
02/25/2012  10:11 PM	START_Alert	MACHINE_RUN	O&O Defrag	D:\DEVICE\O&O DEFRAG\OODTRAY.EXE	O&O Defrag TrayIcon (Win32)
02/25/2012  10:11 PM	*START_Remove	MACHINE_RUN	OODefragTray	D:\Device\O&O Defrag\oodtray.exe	
02/26/2012  5:55 PM	START_Alert	MACHINE_RUN	NVIDIA Media Center Library	C:\WINDOWS\SYSTEM32\NVMCTRAY.DLL	NVIDIA Media Center Library
02/26/2012  5:55 PM	*START_Remove	MACHINE_RUN	NvMediaCenter	C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit	
02/26/2012  5:55 PM	START_Alert	MACHINE_RUNONCE	NVIDIA Media Center Library	C:\WINDOWS\SYSTEM32\NVMCTRAY.DLL	NVIDIA Media Center Library
02/26/2012  5:55 PM	*START_Remove	MACHINE_RUNONCE	NvRegisterMCTray	C:\WINDOWS\system32\NVMCTRAY.DLL,NvMCRegisterApp C:\WINDOWS\system32\NvCpl.dll	
02/26/2012  5:55 PM	START_Alert	MACHINE_RUNONCE	NVIDIA Media Center Library	C:\WINDOWS\SYSTEM32\NVMCTRAY.DLL	NVIDIA Media Center Library
02/26/2012  5:55 PM	*START_Remove	MACHINE_RUNONCE	NvRegisterMCTrayNview	C:\WINDOWS\system32\NVMCTRAY.DLL,NvMCRegisterApp C:\WINDOWS\system32\nView.dll	
02/26/2012  7:24 PM	START_Alert	MACHINE_RUN	O&O Defrag	D:\DEVICE\O&O DEFRAG\OODTRAY.EXE	O&O Defrag TrayIcon (Win32)
02/26/2012  7:24 PM	*START_Remove	MACHINE_RUN	OODefragTray	D:\Device\O&O Defrag\oodtray.exe	
02/26/2012  8:28 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Ѹ7	D:\PROGRAM\THUNDER\BHO\XLFXCTRL1.0.1.64.DLL	xlfxctrl
02/26/2012  8:29 PM	SERVICE__from_Disabled	SERVICE_SVCHOST	XLServicePlatform	C:\PROGRAM FILES\COMMON FILES\THUNDER NETWORK\SERVICEPLATFORM\XLSP.dll	
02/26/2012  8:29 PM	SERVICE_Stop	SERVICE_SVCHOST	XLServicePlatform	C:\PROGRAM FILES\COMMON FILES\THUNDER NETWORK\SERVICEPLATFORM\XLSP.dll	
02/26/2012  8:29 PM	SERVICE_Disabled	SERVICE_SVCHOST	XLServicePlatform	C:\PROGRAM FILES\COMMON FILES\THUNDER NETWORK\SERVICEPLATFORM\XLSP.dll	
02/26/2012  9:35 PM	START_Alert	MACHINE_RUN	Watson Subscriber for SENS Network Notifications	C:\PROGRA~1\COMMON~1\MICROS~1\DW\DWTRIG20.EXE	Watson Subscriber for SENS Network Notifications
02/26/2012  9:36 PM	*START_Remove	MACHINE_RUN	DWQueuedReporting	C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe -t	
02/26/2012  10:06 PM	START_Alert	MACHINE_RUN	Watson Subscriber for SENS Network Notifications	C:\PROGRA~1\COMMON~1\MICROS~1\DW\DWTRIG20.EXE	Watson Subscriber for SENS Network Notifications
02/26/2012  10:28 PM	START_Alert	MACHINE_RUN	O&O Defrag	D:\DEVICE\O&O DEFRAG\OODTRAY.EXE	O&O Defrag TrayIcon (Win32)
02/26/2012  10:28 PM	*START_Remove	MACHINE_RUN	OODefragTray	D:\Device\O&O Defrag\oodtray.exe	
02/27/2012  9:16 PM	START_Alert	MACHINE_RUN	O&O Defrag	D:\DEVICE\O&O DEFRAG\OODTRAY.EXE	O&O Defrag TrayIcon (Win32)
02/27/2012  9:16 PM	*START_Remove	MACHINE_RUN	OODefragTray	D:\Device\O&O Defrag\oodtray.exe	
02/29/2012  12:22 AM	TASK_Alert	TASK_SCHEDULED	Adobe? Flash? Player Update Service	C:\WINDOWS\SYSTEM32\MACROMED\FLASH\FLASHPLAYERUPDATESERVICE.EXE	Adobe? Flash? Player Update Service 11.2 r202
02/29/2012  12:31 AM	START_Alert	MACHINE_RUN	O&O Defrag	D:\DEVICE\O&O DEFRAG\OODTRAY.EXE	O&O Defrag TrayIcon (Win32)
02/29/2012  12:31 AM	*START_Remove	MACHINE_RUN	OODefragTray	D:\Device\O&O Defrag\oodtray.exe	
03/03/2012  6:00 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Java(TM) Platform SE 7 U3	C:\WINDOWS\SYSTEM32\DEPLOYJAVA1.DLL	Java(TM) Platform SE binary
03/05/2012  1:07 AM	START_Alert	MACHINE_RUN	O&O Defrag	D:\DEVICE\O&O DEFRAG\OODTRAY.EXE	O&O Defrag TrayIcon (Win32)
03/05/2012  1:07 AM	*START_Remove	MACHINE_RUN	OODefragTray	D:\Device\O&O Defrag\oodtray.exe	
03/08/2012  9:28 PM	START_Alert	MACHINE_RUN	O&O Defrag	D:\DEVICE\O&O DEFRAG\OODTRAY.EXE	O&O Defrag TrayIcon (Win32)
03/08/2012  9:28 PM	*START_Remove	MACHINE_RUN	OODefragTray	D:\Device\O&O Defrag\oodtray.exe	
03/12/2012  10:40 PM	START_Alert	MACHINE_RUNONCE	Windows? Internet Explorer	C:\WINDOWS\SYSTEM32\ADVPACK.DLL	ADVPACK
03/12/2012  11:51 PM	START_Alert	MACHINE_RUNONCE	Windows? Internet Explorer	C:\WINDOWS\SYSTEM32\ADVPACK.DLL	ADVPACK
03/14/2012  2:32 PM	START_Alert	MACHINE_RUN	O&O Defrag	D:\DEVICE\O&O DEFRAG\OODTRAY.EXE	O&O Defrag TrayIcon (Win32)
03/14/2012  2:32 PM	*START_Remove	MACHINE_RUN	OODefragTray	D:\Device\O&O Defrag\oodtray.exe	
03/15/2012  6:33 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Windows? Internet Explorer	C:\WINDOWS\SYSTEM32\IEFRAME.DLL	Internet Explorer
03/15/2012  6:34 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Shockwave Flash	C:\WINDOWS\SYSTEM32\MACROMED\FLASH\FLASH32_11_2_202_221.OCX	Adobe Flash Player 11.2 r202
03/15/2012  6:56 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Windows? Internet Explorer	C:\WINDOWS\SYSTEM32\MSHTML.DLL	Microsoft (R) HTML Viewer
03/15/2012  6:57 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	HTML Help	C:\WINDOWS\SYSTEM32\HHCTRL.OCX	Microsoft? HTML Help Control
03/15/2012  6:57 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Microsoft(R) MSXML 4.0 SP3	C:\WINDOWS\SYSTEM32\MSXML4.DLL	MSXML 4.0 SP3
03/15/2012  6:57 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Windows Media Player	C:\WINDOWS\SYSTEM32\WMP.DLL	Windows Media Player
03/15/2012  6:57 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Windows Media Player	C:\WINDOWS\SYSTEM32\WMP.DLL	Windows Media Player
03/15/2012  6:57 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Windows Media Player	C:\WINDOWS\SYSTEM32\WMP.DLL	Windows Media Player
03/15/2012  6:57 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Windows? Internet Explorer	C:\WINDOWS\SYSTEM32\IEFRAME.DLL	Internet Explorer
03/15/2012  6:57 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Microsoft(R) MSXML 3.0 SP10	C:\WINDOWS\SYSTEM32\MSXML3.DLL	MSXML 3.0 SP10
03/15/2012  7:36 PM	IEHELPER_Alert	TYPE_BHO		C:\PROGRAM FILES\COMMON FILES\SOURCETEC\SWF CATCHER\INTERNETEXPLORER.HTM	
03/15/2012  7:36 PM	IEHELPER_Remove	TYPE_BHO	InternetExplorer.htm	C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm	SOFTWARE\Microsoft\Internet Explorer\Extensions\{E19ADC6E-3909-43E4-9A89-B7B676377EE3}
03/15/2012  8:50 PM	START_Alert	MACHINE_RUN	ǽ˰	D:\SECURITY\FIREWALL\PFW.EXE	ǽ˰
03/15/2012  8:56 PM	IEHELPER_Alert	TYPE_BHO	Java(TM) Platform SE 7 U3	C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\ADOBE\CS5\JRE\BIN\JP2SSV.DLL	Java(TM) Platform SE binary
03/15/2012  8:57 PM	IEHELPER_Alert	TYPE_BHO		%WINDIR%\NETWORK DIAGNOSTIC\XPNETDIAG.EXE	
03/15/2012  8:57 PM	IEHELPER_Remove	TYPE_BHO	xpnetdiag.exe	%windir%\Network Diagnostic\xpnetdiag.exe	SOFTWARE\Microsoft\Internet Explorer\Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583}
03/15/2012  8:57 PM	START_Alert	MACHINE_RUN	Java(TM) Platform SE Auto Updater 2 0	C:\PROGRAM FILES\COMMON FILES\JAVA\JAVA UPDATE\JUSCHED.EXE	Java(TM) Update Scheduler
03/15/2012  8:57 PM	*START_Remove	MACHINE_RUN	SunJavaUpdateSched	C:\Program Files\Common Files\Java\Java Update\jusched.exe	
03/15/2012  8:59 PM	START_Alert	MACHINE_RUN	cFosSpeed Window	C:\PROGRAM FILES\XFAST LAN\CFOSSPEED.EXE	cFosSpeed Window
03/15/2012  9:08 PM	IEHELPER_Alert	TYPE_BHO	ALiBaBar	D:\INTERNET\ALIBABAR\ALIBABAR.DLL	IE add-on
03/15/2012  9:09 PM	START_Alert	MACHINE_RUN	runiep Ӧó	D:\SECURITY\ANTISPYWARE\RUNIEP.EXE	Rising AntiSpyware Monitor
03/15/2012  9:09 PM	TASK_Kill	INFO_TASK	runeip	D:\Security\AntiSpyware\runiep.exe /startup	
03/15/2012  9:09 PM	*START_Remove	MACHINE_RUN	runeip	D:\Security\AntiSpyware\runiep.exe /startup	
03/15/2012  9:09 PM	START_Alert	REG_ShellExecuteHook	ǿȫ4.0	C:\WINDOWS\SYSTEM32\SHLHOOK.DLL	shlhook Module
03/15/2012  9:09 PM	REMOVE_SHELLEXECUTEHOOK	REG_ShellExecuteHook	Ras Shell Execute Hook	C:\WINDOWS\system32\shlhook.dll	{AC2DC2EF-5165-40A3-8CDF-41DCA1B0901A}
03/15/2012  9:09 PM	START_Alert	REG_AppInitDLLs	AppInit_DLLs	C:\WINDOWS\system32\IEPROT.DLL	IE Protector
03/15/2012  9:09 PM	*START_Remove	REG_AppInitDLLs	IE Protector	ieprot.dll	Beijing Rising Technology Co., Ltd.
03/15/2012  9:09 PM	IEHELPER_Alert	TYPE_BHO	ǿȫ5.0	C:\WINDOWS\SYSTEM32\KAKATOOL.DLL	Rising AntiSpyware Toolbar
03/15/2012  9:46 PM	START_Alert	MACHINE_RUN	ǽ˰	D:\SECURITY\FIREWALL\PFW.EXE	ǽ˰
03/15/2012  9:49 PM	IEHELPER_Alert	TYPE_BHO	ALiBaBar	D:\INTERNET\ALIBABAR\ALIBABAR.DLL	IE add-on
03/15/2012  9:49 PM	IEHELPER_Alert	TYPE_BHO		%WINDIR%\NETWORK DIAGNOSTIC\XPNETDIAG.EXE	
03/15/2012  9:49 PM	IEHELPER_Remove	TYPE_BHO	xpnetdiag.exe	%windir%\Network Diagnostic\xpnetdiag.exe	SOFTWARE\Microsoft\Internet Explorer\Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583}
03/15/2012  9:49 PM	START_Alert	MACHINE_RUN	runiep Ӧó	D:\SECURITY\ANTISPYWARE\RUNIEP.EXE	Rising AntiSpyware Monitor
03/15/2012  9:49 PM	TASK_Kill	INFO_TASK	runeip	D:\Security\AntiSpyware\runiep.exe /startup	
03/15/2012  9:49 PM	*START_Remove	MACHINE_RUN	runeip	D:\Security\AntiSpyware\runiep.exe /startup	
03/15/2012  9:49 PM	START_Alert	REG_ShellExecuteHook	ǿȫ4.0	C:\WINDOWS\SYSTEM32\SHLHOOK.DLL	shlhook Module
03/15/2012  9:49 PM	REMOVE_SHELLEXECUTEHOOK	REG_ShellExecuteHook	Ras Shell Execute Hook	C:\WINDOWS\system32\shlhook.dll	{AC2DC2EF-5165-40A3-8CDF-41DCA1B0901A}
03/15/2012  9:49 PM	START_Alert	REG_AppInitDLLs	AppInit_DLLs	C:\WINDOWS\system32\IEPROT.DLL	IE Protector
03/15/2012  9:49 PM	*START_Remove	REG_AppInitDLLs	IE Protector	ieprot.dll	Beijing Rising Technology Co., Ltd.
03/15/2012  9:49 PM	IEHELPER_Alert	TYPE_BHO	ǿȫ5.0	C:\WINDOWS\SYSTEM32\KAKATOOL.DLL	Rising AntiSpyware Toolbar
03/16/2012  1:14 PM	START_Alert	MACHINE_RUN	cFosSpeed Window	C:\PROGRAM FILES\XFASTLAN\CFOSSPEED.EXE	cFosSpeed Window
03/16/2012  1:16 PM	IEHELPER_Alert	TYPE_BHO	Java(TM) Platform SE 7 U3	C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\ADOBE\CS5\JRE\BIN\JP2SSV.DLL	Java(TM) Platform SE binary
03/16/2012  1:16 PM	IEHELPER_Remove	TYPE_BHO	jp2ssv.dll	C:\Documents and Settings\All Users\Application Data\Adobe\CS5\jre\bin\jp2ssv.dll	SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}
03/16/2012  1:17 PM	START_Alert	MACHINE_RUN	Java(TM) Platform SE Auto Updater 2 0	C:\PROGRAM FILES\COMMON FILES\JAVA\JAVA UPDATE\JUSCHED.EXE	Java(TM) Update Scheduler
03/16/2012  1:17 PM	*START_Remove	MACHINE_RUN	SunJavaUpdateSched	C:\Program Files\Common Files\Java\Java Update\jusched.exe	
03/16/2012  1:29 PM	START_Alert	MACHINE_RUN	O&O Defrag	D:\DEVICE\O&O DEFRAG\OODTRAY.EXE	O&O Defrag TrayIcon (Win32)
03/16/2012  1:29 PM	TASK_Kill	INFO_TASK	OODefragTray	D:\Device\O&O Defrag\oodtray.exe	
03/16/2012  1:29 PM	*START_Remove	MACHINE_RUN	OODefragTray	D:\Device\O&O Defrag\oodtray.exe	
03/16/2012  1:32 PM	START_Alert	MACHINE_RUN	O&O Defrag	D:\DEVICE\O&O DEFRAG\OODTRAY.EXE	O&O Defrag TrayIcon (Win32)
03/16/2012  1:32 PM	TASK_Kill	INFO_TASK	OODefragTray	D:\Device\O&O Defrag\oodtray.exe	
03/16/2012  1:32 PM	*START_Remove	MACHINE_RUN	OODefragTray	D:\Device\O&O Defrag\oodtray.exe	
03/16/2012  2:03 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	DHTML Editing Component	C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\TRIEDIT\DHTMLED.OCX	Microsoft (R) Dynamic HTML Editing Control
03/16/2012  2:04 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Windows Media Player	C:\WINDOWS\SYSTEM32\WMP.DLL	Windows Media Player
03/16/2012  2:10 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Microsoft(R) MSXML 3.0 SP10	C:\WINDOWS\SYSTEM32\MSXML3.DLL	MSXML 3.0 SP10
03/16/2012  2:15 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Microsoft(R) MSXML 6.0 SP2	C:\WINDOWS\SYSTEM32\MSXML6.DLL	MSXML 6.0 SP2
03/16/2012  2:15 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Microsoft(R) MSXML 6.0 SP2	C:\WINDOWS\SYSTEM32\MSXML6.DLL	MSXML 6.0 SP2
03/16/2012  2:44 PM	START_Alert	MACHINE_RUN		C:\PROGRAM FILES\COMMON FILES\!SUNV\GRASPWORD\SYSHOTKEY.EXE	
03/16/2012  2:44 PM	TASK_Kill	INFO_TASK	SysHotKey_DFDD	C:\Program Files\Common Files\!Sunv\GraspWord\SysHotKey.exe	
03/16/2012  2:44 PM	*START_Remove	MACHINE_RUN	SysHotKey_DFDD	C:\Program Files\Common Files\!Sunv\GraspWord\SysHotKey.exe	
03/16/2012  2:44 PM	START_Alert	MACHINE_RUN		D:\PROGRAM\DFKC2003\SMARTA.EXE	
03/16/2012  2:44 PM	TASK_Kill	INFO_TASK	DFKCSmartAssistant	D:\Program\dfkc2003\SmartA.exe	
03/16/2012  2:44 PM	*START_Remove	MACHINE_RUN	DFKCSmartAssistant	D:\Program\dfkc2003\SmartA.exe	
03/16/2012  2:44 PM	IEHELPER_Alert	TYPE_BHO	DFKCAddIn Module	D:\PROGRAM\DFKC2003\IEBAND.DLL	DFKCAddIn Module
03/16/2012  2:44 PM	IEHELPER_Alert	TYPE_BHO			
03/16/2012  2:48 PM	IEHELPER_Alert	TYPE_BHO	Orbitcth	D:\PROGRAM\ORBITDOWNLOADER\ORBITCTH.DLL	Orbitcth
03/16/2012  2:55 PM	IEHELPER_Alert	TYPE_BHO		D:\PROGRAM\PICSAVER\PICSAVER.EXE	ҳͼƬ
03/16/2012  3:00 PM	START_Alert	MACHINE_RUN	O&O Defrag	D:\DEVICE\O&O DEFRAG\OODTRAY.EXE	O&O Defrag TrayIcon (Win32)
03/16/2012  3:01 PM	TASK_Kill	INFO_TASK	OODefragTray	D:\Device\O&O Defrag\oodtray.exe	
03/16/2012  3:01 PM	*START_Remove	MACHINE_RUN	OODefragTray	D:\Device\O&O Defrag\oodtray.exe	
03/16/2012  3:01 PM	IEHELPER_Alert	TYPE_BHO	Ѹ7	D:\PROGRAM\THUNDER\BHO\XLBROWSERADDIN1.0.7.70.DLL	XlBrowserAddin
03/16/2012  3:01 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Ѹ7	D:\PROGRAM\THUNDER\BHO\XLBROWSERADDIN1.0.7.70.DLL	XlBrowserAddin
03/16/2012  3:01 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Ѹ7	D:\PROGRAM\THUNDER\BHO\THUNDERAGENT7.2.6.3426.DLL	ThunderAgent
03/16/2012  3:01 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Ѹ7	D:\PROGRAM\THUNDER\BHO\USERAGENT1.0.2.10.DLL	UserAgent
03/16/2012  3:02 PM	START_Alert	MACHINE_RUN	O&O Defrag	D:\DEVICE\O&O DEFRAG\OODTRAY.EXE	O&O Defrag TrayIcon (Win32)
03/16/2012  3:02 PM	TASK_Kill	INFO_TASK	OODefragTray	D:\Device\O&O Defrag\oodtray.exe	
03/16/2012  3:02 PM	*START_Remove	MACHINE_RUN	OODefragTray	D:\Device\O&O Defrag\oodtray.exe	
03/16/2012  3:09 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Ѹ7	D:\PROGRAM\THUNDER\BHO\XUNLEIBHO7.2.6.3426.DLL	XunleiBHO
03/16/2012  3:56 PM	IEHELPER_Alert	TYPE_BHO	UrlAngel	D:\INTERNET\URLANGEL\URLANGEL.EXE	
03/16/2012  3:56 PM	TASK_Kill	INFO_TASK	UrlAngel	D:\Internet\UrlAngel\UrlAngel.exe	
03/16/2012  3:56 PM	IEHELPER_Remove	TYPE_BHO	UrlAngel.exe	D:\Internet\UrlAngel\UrlAngel.exe	SOFTWARE\Microsoft\Internet Explorer\Extensions\{773D7591-91BC-4cd8-8850-353EB4612FF6}
03/16/2012  4:45 PM	START_Alert	MACHINE_RUNONCE	Windows? Internet Explorer	C:\WINDOWS\SYSTEM32\ADVPACK.DLL	ADVPACK
03/16/2012  4:45 PM	*START_Remove	MACHINE_RUNONCE	wextract_cleanup0	C:\WINDOWS\system32\advpack.dll,DelNodeRunDLL32 C:\WINDOWS\msdownld.tmp\IXP000.TMP\	
03/16/2012  4:54 PM	IEHELPER_Alert	TYPE_BHO		C:\PROGRAM FILES\COMMON FILES\SOURCETEC\SWF CATCHER\INTERNETEXPLORER.HTM	
03/16/2012  5:08 PM	TASK_Alert	TASK_SCHEDULED		C:\PROGRAM FILES\COMMON FILES\ADOBE\OOBE\PDAPP\UWA\UPDATERSTARTUPUTILITY.EXE	
03/16/2012  5:33 PM	START_Alert	MACHINE_RUNONCE	Windows? Internet Explorer	C:\WINDOWS\SYSTEM32\ADVPACK.DLL	ADVPACK
03/16/2012  6:25 PM	START_Alert	MACHINE_RUNONCE	Windows? Internet Explorer	C:\WINDOWS\SYSTEM32\ADVPACK.DLL	ADVPACK
03/16/2012  6:29 PM	SERVICE__from_Disabled	SERVICE_EXE	Nalpeiron Licensing Service	C:\WINDOWS\system32\nlssrv32.exe	
03/16/2012  6:29 PM	SERVICE_Stop	SERVICE_EXE	Nalpeiron Licensing Service	C:\WINDOWS\system32\nlssrv32.exe	
03/16/2012  6:29 PM	SERVICE_Disabled	SERVICE_EXE	Nalpeiron Licensing Service	C:\WINDOWS\system32\nlssrv32.exe	
03/16/2012  7:27 PM	SERVICE__from_Disabled	SERVICE_EXE	This service enables products that use the Nalpeiron Licensing System.	C:\WINDOWS\system32\nlssrv32.exe	
03/16/2012  7:27 PM	SERVICE_Stop	SERVICE_EXE	This service enables products that use the Nalpeiron Licensing System.	C:\WINDOWS\system32\nlssrv32.exe	
03/16/2012  7:27 PM	SERVICE_Disabled	SERVICE_EXE	This service enables products that use the Nalpeiron Licensing System.	C:\WINDOWS\system32\nlssrv32.exe	
03/16/2012  7:51 PM	IEHELPER_Alert	TYPE_BHO	FastStone Capture	D:\PROGRAM\FSCAPTURE\FSCAPTURE.EXE	FastStone Capture ʱպ
03/16/2012  7:51 PM	IEHELPER_Alert	TYPE_BHO		D:\INTERNET\ALL RAR DOWNLOAD\ALL DOWNLOAD.EXE	
03/16/2012  7:54 PM	IEHELPER_Alert	TYPE_BHO		D:\PROGRAM\PICSAVER\PICSAVER.EXE	ҳͼƬ
03/16/2012  9:11 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Microsoft(R) MSXML 3.0 SP10	C:\WINDOWS\SYSTEM32\MSXML3.DLL	MSXML 3.0 SP10
03/16/2012  9:45 PM	START_Alert	CURRENT_RUN	Uniblue Launcher	R:\POWERSUITE\LAUNCHER.EXE	Uniblue Launcher
03/16/2012  9:45 PM	*START_Remove	CURRENT_RUN	PowerSuite	R:\PowerSuite\launcher.exe delay 20000  -m	
03/17/2012  12:05 AM	TASK_Alert	TASK_SCHEDULED		E:\浵\TOOL BOX\REGISTRY_VICTOR\REGISTRY VICTOR 6.3.12.18\REGISTRY VICTOR 6.3.12.18\REGISTRYVICTOR.EXE	
03/17/2012  12:49 AM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Microsoft(R) MSXML 3.0 SP10	C:\WINDOWS\SYSTEM32\MSXML3.DLL	MSXML 3.0 SP10
03/17/2012  1:51 PM	START_Alert	CURRENT_RUN	Uniblue Launcher	D:\INTERNET\SPEEDUPMYPC\LAUNCHER.EXE	Uniblue Launcher
03/17/2012  1:51 PM	*START_Remove	CURRENT_RUN	SpeedUpMyPC	D:\Internet\SpeedUpMyPC\launcher.exe -d 20000 	
03/17/2012  1:51 PM	START_Alert	CURRENT_RUN	Uniblue Launcher	D:\INTERNET\SPEEDUPMYPC\LAUNCHER.EXE	Uniblue Launcher
03/17/2012  1:51 PM	*START_Remove	CURRENT_RUN	SpeedUpMyPC	D:\Internet\SpeedUpMyPC\launcher.exe -d 20000 	
03/17/2012  1:53 PM	START_Alert	CURRENT_RUN	Uniblue Launcher	D:\INTERNET\SPEEDUPMYPC\LAUNCHER.EXE	Uniblue Launcher
03/17/2012  1:53 PM	START_Alert	CURRENT_RUN	Uniblue Launcher	D:\INTERNET\SPEEDUPMYPC\LAUNCHER.EXE	Uniblue Launcher
03/17/2012  1:53 PM	*START_Remove	CURRENT_RUN	SpeedUpMyPC	D:\Internet\SpeedUpMyPC\launcher.exe -d 20000 	
03/17/2012  1:54 PM	START_Alert	CURRENT_RUN	Uniblue Launcher	D:\INTERNET\SPEEDUPMYPC\LAUNCHER.EXE	Uniblue Launcher
03/17/2012  1:54 PM	*START_Remove	CURRENT_RUN	SpeedUpMyPC	D:\Internet\SpeedUpMyPC\launcher.exe -d 20000 	
03/17/2012  2:07 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Windows Media Player	C:\WINDOWS\SYSTEM32\WMP.DLL	Windows Media Player
03/17/2012  2:19 PM	TASK_Alert	TASK_SCHEDULED	SpeedUpMyPC Monitor	D:\INTERNET\SPEEDUPMYPC\SPMONITOR.EXE	Uniblue SpeedUpMyPC Monitor
03/17/2012  2:20 PM	TASK_Alert	TASK_SCHEDULED		E:\浵\TOOL BOX\REGISTRY_VICTOR\REGISTRY VICTOR 6.3.12.18\REGISTRY VICTOR 6.3.12.18\REGISTRYVICTOR.EXE	
03/17/2012  3:02 PM	IEHELPER_Alert	TYPE_BHO	Baidu Toolbar	C:\PROGRAM FILES\BAIDU\TOOLBAR\BAIDUBARX.DLL	Baidu Toolbar For IE
03/17/2012  3:02 PM	IEHELPER_Remove	TYPE_BHO	BaiduBarX.dll	C:\Program Files\Baidu\Toolbar\BaiduBarX.dll	SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{77FEF28E-EB96-44FF-B511-3185DEA48697}
03/17/2012  3:02 PM	IEHELPER_Remove	TYPE_BHO	BaiduBarX.dll	C:\Program Files\Baidu\Toolbar\BaiduBarX.dll	SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{77FEF28E-EB96-44FF-B511-3185DEA48697}
03/17/2012  3:02 PM	IEHELPER_Alert	TYPE_BHO	AddressSearch Module	C:\PROGRAM FILES\BAIDU\{8C70054F-58EF-78AB-343D-0DEBCA9A58FC}\ADDRESSBAR.DLL	AddressSearch Module
03/17/2012  3:02 PM	IEHELPER_Remove	TYPE_BHO	AddressBar.dll	C:\Program Files\Baidu\{8C70054F-58EF-78AB-343D-0DEBCA9A58FC}\AddressBar.dll	SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8C70054F-58EF-78AB-343D-0DEBCA9A58FC}
03/17/2012  3:02 PM	IEHELPER_Alert	TYPE_BHO	Baidu Toolbar	C:\PROGRAM FILES\BAIDU\TOOLBAR\BAIDUBARX.DLL	Baidu Toolbar For IE
03/17/2012  3:02 PM	IEHELPER_Remove	TYPE_BHO	BaiduBarX.dll	C:\Program Files\Baidu\Toolbar\BaiduBarX.dll	SOFTWARE\Microsoft\Internet Explorer\Toolbar\
03/17/2012  3:02 PM	IEHELPER_Remove	TYPE_BHO	BaiduBarX.dll	C:\Program Files\Baidu\Toolbar\BaiduBarX.dll	SOFTWARE\Microsoft\Internet Explorer\Toolbar\
03/17/2012  3:35 PM	IEHELPER_Alert	TYPE_BHO		C:\PROGRAM FILES\COMMON FILES\SOURCETEC\SWF CATCHER\INTERNETEXPLORER.HTM	
03/17/2012  3:36 PM	IEHELPER_Remove	TYPE_BHO	InternetExplorer.htm	C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm	SOFTWARE\Microsoft\Internet Explorer\Extensions\{E19ADC6E-3909-43E4-9A89-B7B676377EE3}
03/17/2012  3:40 PM	IEHELPER_Alert	TYPE_BHO		C:\PROGRAM FILES\COMMON FILES\SOURCETEC\SWF CATCHER\INTERNETEXPLORER.HTM	
03/17/2012  3:40 PM	IEHELPER_Remove	TYPE_BHO	InternetExplorer.htm	C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm	SOFTWARE\Microsoft\Internet Explorer\Extensions\{E19ADC6E-3909-43E4-9A89-B7B676377EE3}
03/17/2012  5:06 PM	START_Alert	MACHINE_RUN		C:\PROGRAM FILES\PDNOO\EJTQ.EXE	
03/17/2012  5:07 PM	*START_Remove	MACHINE_RUN	keygen	C:\Program Files\Pdnoo\Ejtq.exe /keygen	
03/17/2012  6:32 PM	START_Alert	CURRENT_RUN	Uniblue Launcher	R:\POWERSUITE\LAUNCHER.EXE	Uniblue Launcher
03/17/2012  6:32 PM	*START_Remove	CURRENT_RUN	PowerSuite	R:\PowerSuite\launcher.exe delay 20000  -m	
03/17/2012  6:35 PM	START_Alert	CURRENT_RUN		R:\DRIVERSCANNER\LAUNCHER.EXE	
03/17/2012  6:35 PM	*START_Remove	CURRENT_RUN	DriverScanner	R:\DriverScanner\launcher.exe delay 20000 	
03/17/2012  6:47 PM	TASK_Alert	TASK_SCHEDULED		E:\浵\TOOL BOX\REGISTRY_VICTOR\REGISTRY VICTOR 6.3.12.18\REGISTRY VICTOR 6.3.12.18\REGISTRYVICTOR.EXE	
03/17/2012  6:57 PM	START_Alert	CURRENT_RUN	Uniblue Launcher	D:\INTERNET\SPEEDUPMYPC\LAUNCHER.EXE	Uniblue Launcher
03/17/2012  6:57 PM	*START_Remove	CURRENT_RUN	SpeedUpMyPC	D:\Internet\SpeedUpMyPC\launcher.exe -d 20000 	
03/17/2012  6:58 PM	START_Alert	CURRENT_RUN	Uniblue Launcher	D:\INTERNET\SPEEDUPMYPC\LAUNCHER.EXE	Uniblue Launcher
03/17/2012  6:58 PM	*START_Remove	CURRENT_RUN	SpeedUpMyPC	D:\Internet\SpeedUpMyPC\launcher.exe -d 20000 	
03/17/2012  7:12 PM	TASK_Alert	TASK_SCHEDULED	SpeedUpMyPC Monitor	D:\INTERNET\SPEEDUPMYPC\SPMONITOR.EXE	Uniblue SpeedUpMyPC Monitor
03/17/2012  7:43 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Windows Media Player	C:\WINDOWS\SYSTEM32\WMP.DLL	Windows Media Player
03/17/2012  7:45 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Microsoft(R) MSXML 4.0 SP3	C:\WINDOWS\SYSTEM32\MSXML4.DLL	MSXML 4.0 SP3
03/17/2012  8:18 PM	START_Alert	MACHINE_RUNONCE		GRPCONV -O	
03/17/2012  9:48 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Microsoft(R) MSXML 3.0 SP10	C:\WINDOWS\SYSTEM32\MSXML3.DLL	MSXML 3.0 SP10
03/17/2012  10:43 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	-רģ⶯̬	D:\PROGRAM\THUNDER\BHO\LINKSIMULATE.DLL	DDRרģ
03/18/2012  12:23 AM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Windows? Internet Explorer	C:\WINDOWS\SYSTEM32\MSHTML.DLL	Microsoft (R) HTML Viewer
03/18/2012  1:07 AM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Microsoft(R) MSXML 3.0 SP10	C:\WINDOWS\SYSTEM32\MSXML3.DLL	MSXML 3.0 SP10
03/18/2012  1:14 AM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Microsoft(R) MSXML 3.0 SP10	C:\WINDOWS\SYSTEM32\MSXML3.DLL	MSXML 3.0 SP10
03/18/2012  12:44 PM	START_Alert	MACHINE_RUN	ȫ	E:\PROGRAMS\TOOL BOX\\BDANGEL.EXE	ȫ飬㣡
03/18/2012  12:44 PM	*START_Remove	MACHINE_RUN	Bdangel	E:\Programs\Tool Box\\bdangel.exe -	
03/18/2012  1:43 PM	START_Alert	MACHINE_RUN	AutoDetect Ӧó	E:\PROGRAMS\TOOL BOX\WINDOWS \AUTODETECT.EXE	ϵ
03/18/2012  1:43 PM	TASK_Kill	INFO_TASK	PoweronscanWmOpt	E:\Programs\Tool Box\Windows \AutoDetect.exe -OnPower	
03/18/2012  1:43 PM	*START_Remove	MACHINE_RUN	PoweronscanWmOpt	E:\Programs\Tool Box\Windows \AutoDetect.exe -OnPower	
03/18/2012  1:44 PM	START_Alert	MACHINE_RUN	ȫ	E:\PROGRAMS\TOOL BOX\\BDANGEL.EXE	ȫ飬㣡
03/18/2012  1:44 PM	*START_Remove	MACHINE_RUN	Bdangel	E:\Programs\Tool Box\\bdangel.exe -	
03/18/2012  2:44 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Windows Media Player	C:\WINDOWS\SYSTEM32\WMP.DLL	Windows Media Player
03/18/2012  6:47 PM	START_Alert	MACHINE_RUN	O&O Defrag	D:\DEVICE\O&O DEFRAG\OODTRAY.EXE	O&O Defrag TrayIcon (Win32)
03/18/2012  6:47 PM	*START_Remove	MACHINE_RUN	OODefragTray	D:\Device\O&O Defrag\oodtray.exe	
03/18/2012  10:04 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Windows? Internet Explorer	C:\WINDOWS\SYSTEM32\MSHTML.DLL	Microsoft (R) HTML Viewer
03/19/2012  12:15 AM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Microsoft(R) MSXML 3.0 SP10	C:\WINDOWS\SYSTEM32\MSXML3.DLL	MSXML 3.0 SP10
03/19/2012  2:53 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	-רģ⶯̬	D:\PROGRAM\THUNDER\BHO\LINKSIMULATE.DLL	DDRרģ
03/19/2012  2:53 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	-רģ⶯̬	D:\PROGRAM\THUNDER\BHO\LINKSIMULATE.DLL	DDRרģ
03/19/2012  7:17 PM	START_Alert	MACHINE_RUN	O&O Defrag	D:\DEVICE\O&O DEFRAG\OODTRAY.EXE	O&O Defrag TrayIcon (Win32)
03/19/2012  7:17 PM	*START_Remove	MACHINE_RUN	OODefragTray	D:\Device\O&O Defrag\oodtray.exe	
03/19/2012  8:32 PM	START_Alert	MACHINE_RUN	O&O Defrag	D:\DEVICE\O&O DEFRAG\OODTRAY.EXE	O&O Defrag TrayIcon (Win32)
03/19/2012  8:32 PM	*START_Remove	MACHINE_RUN	OODefragTray	D:\Device\O&O Defrag\oodtray.exe	
03/20/2012  1:27 AM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Microsoft(R) MSXML 3.0 SP10	C:\WINDOWS\SYSTEM32\MSXML3.DLL	MSXML 3.0 SP10
03/21/2012  7:30 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Windows? Internet Explorer	C:\WINDOWS\SYSTEM32\MSHTML.DLL	Microsoft (R) HTML Viewer
03/22/2012  12:32 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Microsoft(R) MSXML 3.0 SP10	C:\WINDOWS\SYSTEM32\MSXML3.DLL	MSXML 3.0 SP10
03/22/2012  12:32 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Windows Media Player	C:\WINDOWS\SYSTEM32\WMP.DLL	Windows Media Player
03/22/2012  12:32 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	-רģ⶯̬	D:\PROGRAM\THUNDER\BHO\LINKSIMULATE.DLL	DDRרģ
03/22/2012  12:32 PM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	-רģ⶯̬	D:\PROGRAM\THUNDER\BHO\LINKSIMULATE.DLL	DDRרģ
03/23/2012  12:47 AM	IEHELPER_Alert	TYPE_BHO		D:\PROGRAM\THUNDER\BHO\XUNLEIBHO7.2.6.3426.DLL	
03/23/2012  12:47 AM	IEHELPER_Alert	TYPE_BHO		D:\PROGRAM\DFKC2003\IEBAND.DLL	
03/23/2012  1:06 AM	IEHELPER_Alert	TYPE_BHO		D:\PROGRAM\THUNDER\BHO\XUNLEIBHO7.2.6.3426.DLL	
03/23/2012  1:06 AM	IEHELPER_Alert	TYPE_BHO		D:\PROGRAM\DFKC2003\IEBAND.DLL	
03/23/2012  1:19 AM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Microsoft(R) MSXML 3.0 SP10	C:\WINDOWS\SYSTEM32\MSXML3.DLL	MSXML 3.0 SP10
03/23/2012  12:47 PM	IEHELPER_Alert	TYPE_BHO		D:\PROGRAM\THUNDER\BHO\XUNLEIBHO7.2.6.3426.DLL	
03/23/2012  12:47 PM	IEHELPER_Alert	TYPE_BHO		D:\PROGRAM\DFKC2003\IEBAND.DLL	
03/23/2012  4:21 PM	IEHELPER_Alert	TYPE_BHO		D:\PROGRAM\THUNDER\BHO\XLBROWSERADDIN1.0.7.70.DLL	
03/23/2012  4:21 PM	IEHELPER_Alert	TYPE_BHO		D:\PROGRAM\THUNDER\BHO\XUNLEIBHO7.2.6.3426.DLL	
03/23/2012  4:21 PM	IEHELPER_Alert	TYPE_BHO		D:\PROGRAM\THUNDER\BHO\XLBROWSERADDINKERNEL1.0.7.70.DLL	
03/23/2012  4:21 PM	IEHELPER_Alert	TYPE_BHO		D:\PROGRAM\DFKC2003\IEBAND.DLL	
03/23/2012  4:21 PM	IEHELPER_Remove	TYPE_BHO	IEBand.DLL	D:\Program\dfkc2003\IEBand.DLL	SOFTWARE\Microsoft\Internet Explorer\Toolbar\
03/23/2012  8:26 PM	IEHELPER_Alert	TYPE_BHO		D:\PROGRAM\THUNDER\BHO\XUNLEIBHO7.2.6.3426.DLL	
03/23/2012  8:26 PM	IEHELPER_Alert	TYPE_BHO		D:\PROGRAM\DFKC2003\IEBAND.DLL	
03/23/2012  8:35 PM	IEHELPER_Alert	TYPE_BHO	Flash & Media Capture	D:\INTERNET\FLASH AND MEDIA CAPTURE\FMCAPT.DLL	Flash & Media Capture
03/23/2012  8:35 PM	IEHELPER_Alert	TYPE_BHO			
03/23/2012  8:36 PM	IEHELPER_Alert	TYPE_BHO	Baidu Toolbar	C:\PROGRAM FILES\BAIDU\TOOLBAR\BAIDUBARX.DLL	Baidu Toolbar For IE
03/23/2012  8:36 PM	IEHELPER_Remove	TYPE_BHO	BaiduBarX.dll	C:\Program Files\Baidu\Toolbar\BaiduBarX.dll	SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{77FEF28E-EB96-44FF-B511-3185DEA48697}
03/23/2012  8:36 PM	IEHELPER_Remove	TYPE_BHO	BaiduBarX.dll	C:\Program Files\Baidu\Toolbar\BaiduBarX.dll	SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{77FEF28E-EB96-44FF-B511-3185DEA48697}
03/23/2012  8:36 PM	IEHELPER_Alert	TYPE_BHO	AddressSearch Module	C:\PROGRAM FILES\BAIDU\{8C70054F-58EF-78AB-343D-0DEBCA9A58FC}\ADDRESSBAR.DLL	AddressSearch Module
03/23/2012  8:36 PM	IEHELPER_Alert	TYPE_BHO	Baidu Toolbar	C:\PROGRAM FILES\BAIDU\TOOLBAR\BAIDUBARX.DLL	Baidu Toolbar For IE
03/23/2012  8:36 PM	IEHELPER_Remove	TYPE_BHO	BaiduBarX.dll	C:\Program Files\Baidu\Toolbar\BaiduBarX.dll	SOFTWARE\Microsoft\Internet Explorer\Toolbar\
03/23/2012  8:36 PM	IEHELPER_Remove	TYPE_BHO	BaiduBarX.dll	C:\Program Files\Baidu\Toolbar\BaiduBarX.dll	SOFTWARE\Microsoft\Internet Explorer\Toolbar\
03/23/2012  11:33 PM	IEHELPER_Alert	TYPE_BHO		D:\PROGRAM\THUNDER\BHO\XUNLEIBHO7.2.6.3426.DLL	
03/23/2012  11:33 PM	IEHELPER_Alert	TYPE_BHO		D:\PROGRAM\DFKC2003\IEBAND.DLL	
03/24/2012  12:39 AM	LOG_ALERT_ACTIVEX	TYPE_ACTIVEX	Microsoft(R) MSXML 3.0 SP10	C:\WINDOWS\SYSTEM32\MSXML3.DLL	MSXML 3.0 SP10
03/24/2012  1:51 PM	IEHELPER_Alert	TYPE_BHO		D:\PROGRAM\THUNDER\BHO\XUNLEIBHO7.2.6.3426.DLL	
03/24/2012  1:51 PM	IEHELPER_Alert	TYPE_BHO		D:\PROGRAM\DFKC2003\IEBAND.DLL	
