下载 pe_xscan 扫描 log 并分析，发现如下可疑项（进程模块中重复的部分有省略）：
/===
pe_xscan 08-03-03 by Purple Endurer
2008-3-12 12:54:58
Windows XP Service Pack 2(5.1.2600)
管理员用户组
正常模式
[System Process]* 0 C:/WINDOWS/SYSTEM32/FDZZB.FQZ | 1601-1-2 7:8:43 C:/WINDOWS/SYSTEM32/FVJBV.DLL | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Advanced Windows 32 Base API | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | advapi32.dll | advapi32.dll C:/WINDOWS/SYSTEM32/FHHLR.DLL | 2007-4-16 23:54:26 | Microsoft(R) Windows(R) Operating System | 5.1.2600.3119 | Windows NT BASE API Client DLL | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301) | Microsoft Corporation| ? | kernel32 | kernel32 C:/WINDOWS/SYSTEM32/ZOHWP.LAT | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/NGVOD.DLL | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Advanced Windows 32 Base API | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | advapi32.dll | advapi32.dll C:/WINDOWS/SYSTEM32/VKDSL.DLL | 2007-4-16 23:54:26 | Microsoft(R) Windows(R) Operating System | 5.1.2600.3119 | Windows NT BASE API Client DLL | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301) | Microsoft Corporation| ? | kernel32 | kernel32 C:/WINDOWS/SYSTEM32/GJLBJ.VYA | 2008-1-9 16:59:14 C:/WINDOWS/SYSTEM32/YBDTB.DLL | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Advanced Windows 32 Base API | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | advapi32.dll | advapi32.dll C:/WINDOWS/SYSTEM32/KNPFN.DLL | 2007-4-16 23:54:26 | Microsoft(R) Windows(R) Operating System | 5.1.2600.3119 | Windows NT BASE API Client DLL | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301) | Microsoft Corporation| ? | kernel32 | kernel32 C:/WINDOWS/EXPLORER.EXE* 388 | 2007-6-13 21:21:56 | Microsoft(R) Windows(R) Operating System | 6.00.2900.3156 | Windows Explorer | (C) Microsoft Corporation. All rights reserved. | 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234) | Microsoft Corporation| ? | explorer | EXPLORER.EXE C:/WINDOWS/SYSTEM32/DGIAC.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/ZOHWP.LAT | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/NQSKM.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/GJLBJ.VYA | 2008-1-9 16:59:14 C:/WINDOWS/SYSTEM32/KMPRJ.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/FDZZB.FQZ | 1601-1-2 7:8:43 C:/WINDOWS/SYSTEM32/WZBEV.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/BDGIA.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/KNPHJ.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/JMOGI.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/UXZRT.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/QSVMP.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/VXACU.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/QTVNP.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/BEGYA.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/SVXPR.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/VYADU.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/FHKBE.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/ZBEVY.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/SUWOQ.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/ACFWZ.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/FIKME.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/YADFX.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/RTWYQ.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/LOQTK.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/IKMPG.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/IKNPH.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/QTVYP.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/DFIKC.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/ZCEWY.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/JLNQH.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/HJMOG.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/OQTKN.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/DFIZC.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/VXARU.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/CEGJA.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/ACFHZ.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/ZCEHY.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/XZBTV.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/DGILC.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/EHJLD.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/XZCEW.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/LNPHJ.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/SVXZR.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/SUXZR.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/UWZQT.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/QSUXO.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/CEHJB.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/LNQHK.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/SVXAR.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/EHJMD.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/GJLOF.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/YBDVX.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/PSUMO.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/ZBEGY.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/PRULO.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/UWZBT.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/XACUW.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/FIKCE.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/RUNDLL32.EXE* 3664 | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Run a DLL as an App | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | rundll | RUNDLL.EXE C:/WINDOWS/SYSTEM32/WZBEV.DLL | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/FDZZB.FQZ | 1601-1-2 7:8:43 C:/WINDOWS/SYSTEM32/FVJBV.DLL | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Advanced Windows 32 Base API | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | advapi32.dll | advapi32.dll C:/WINDOWS/SYSTEM32/FHHLR.DLL | 2007-4-16 23:54:26 | Microsoft(R) Windows(R) Operating System | 5.1.2600.3119 | Windows NT BASE API Client DLL | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301) | Microsoft Corporation| ? | kernel32 | kernel32 C:/WINDOWS/SYSTEM32/GJLBJ.VYA | 2008-1-9 16:59:14 C:/WINDOWS/SYSTEM32/ZOHWP.LAT | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/CTFMON.EXE* 360 | 2004-8-17 12:0:0 | Microsoft? Windows? Operating System | 5.1.2600.2180 | CTF Loader | ? Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | CTFMON | CTFMON.EXE C:/WINDOWS/SYSTEM32/FDZZB.FQZ | 1601-1-2 7:8:43 C:/WINDOWS/SYSTEM32/FVJBV.DLL | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Advanced Windows 32 Base API | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | advapi32.dll | advapi32.dll C:/WINDOWS/SYSTEM32/FHHLR.DLL | 2007-4-16 23:54:26 | Microsoft(R) Windows(R) Operating System | 5.1.2600.3119 | Windows NT BASE API Client DLL | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301) | Microsoft Corporation| ? | kernel32 | kernel32 C:/WINDOWS/SYSTEM32/GJLBJ.VYA | 2008-1-9 16:59:14 C:/WINDOWS/SYSTEM32/YBDTB.DLL | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Advanced Windows 32 Base API | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | advapi32.dll | advapi32.dll C:/WINDOWS/SYSTEM32/KNPFN.DLL | 2007-4-16 23:54:26 | Microsoft(R) Windows(R) Operating System | 5.1.2600.3119 | Windows NT BASE API Client DLL | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301) | Microsoft Corporation| ? | kernel32 | kernel32 C:/WINDOWS/SYSTEM32/ZOHWP.LAT | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/NGVOD.DLL | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Advanced Windows 32 Base API | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | advapi32.dll | advapi32.dll C:/WINDOWS/SYSTEM32/VKDSL.DLL | 2007-4-16 23:54:26 | Microsoft(R) Windows(R) Operating System | 5.1.2600.3119 | Windows NT BASE API Client DLL | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301) | Microsoft Corporation| ? | kernel32 | kernel32 C:/PROGRAM FILES/INTERNET EXPLORER/IEXPLORE.EXE* 1624 | 2004-8-17 20:0:0 | Microsoft(R) Windows(R) Operating System | 6.00.2900.2180 | Internet Explorer | (C) Microsoft Corporation. All rights reserved. | 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | iexplore | IEXPLORE.EXE C:/WINDOWS/SYSTEM32/FDZZB.FQZ | 1601-1-2 7:8:43 C:/WINDOWS/SYSTEM32/FVJBV.DLL | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Advanced Windows 32 Base API | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | advapi32.dll | advapi32.dll C:/WINDOWS/SYSTEM32/FHHLR.DLL | 2007-4-16 23:54:26 | Microsoft(R) Windows(R) Operating System | 5.1.2600.3119 | Windows NT BASE API Client DLL | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301) | Microsoft Corporation| ? | kernel32 | kernel32 C:/WINDOWS/SYSTEM32/ZOHWP.LAT | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/GJLBJ.VYA | 2008-1-9 16:59:14 C:/WINDOWS/SYSTEM32/CONIME.EXE* 3056 | 2004-8-17 12:0:0 | Microsoft? Windows? Operating System | 5.1.2600.2180 | Console IME | ? Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | Console | CONIME.EXE C:/WINDOWS/SYSTEM32/FDZZB.FQZ | 1601-1-2 7:8:43 C:/WINDOWS/SYSTEM32/FVJBV.DLL | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Advanced Windows 32 Base API | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | advapi32.dll | advapi32.dll C:/WINDOWS/SYSTEM32/FHHLR.DLL | 2007-4-16 23:54:26 | Microsoft(R) Windows(R) Operating System | 5.1.2600.3119 | Windows NT BASE API Client DLL | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301) | Microsoft Corporation| ? | kernel32 | kernel32 C:/WINDOWS/SYSTEM32/GJLBJ.VYA | 2008-1-9 16:59:14 C:/WINDOWS/SYSTEM32/YBDTB.DLL | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Advanced Windows 32 Base API | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | advapi32.dll | advapi32.dll C:/WINDOWS/SYSTEM32/KNPFN.DLL | 2007-4-16 23:54:26 | Microsoft(R) Windows(R) Operating System | 5.1.2600.3119 | Windows NT BASE API Client DLL | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301) | Microsoft Corporation| ? | kernel32 | kernel32 C:/WINDOWS/SYSTEM32/ZOHWP.LAT | 2007-4-16 23:54:26 C:/WINDOWS/SYSTEM32/NGVOD.DLL | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Advanced Windows 32 Base API | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | advapi32.dll | advapi32.dll C:/WINDOWS/SYSTEM32/VKDSL.DLL | 2007-4-16 23:54:26 | Microsoft(R) Windows(R) Operating System | 5.1.2600.3119 | Windows NT BASE API Client DLL | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301) | Microsoft Corporation| ? | kernel32 | kernel32 O22 - SHAREDTASKSCHEDULER: () - {52EA63FC-730B-2EB6-30C8-D961EA730C95} = C:/WINDOWS/SYSTEM32/DGIAC.DLL O22 - SHAREDTASKSCHEDULER: () - {30C841DA-51E9-0C94-1EA6-B74FC851DA63} = C:/WINDOWS/SYSTEM32/NQSKM.DLL O22 - SHAREDTASKSCHEDULER: () - {841D952E-962F-41DA-62FB-FC850D962FB8} = C:/WINDOWS/SYSTEM32/KMPRJ.DLL O22 - SHAREDTASKSCHEDULER: () - {0D961EA7-2EB7-D962-EB74-841D952EB740} = C:/WINDOWS/SYSTEM32/WZBEV.DLL O22 - SHAREDTASKSCHEDULER: () - {A63EB740-B840-63FB-841C-1EA62FB841D9} = C:/WINDOWS/SYSTEM32/MORIL.DLL O22 - SHAREDTASKSCHEDULER: () - {1DA62EB7-2FB8-DA63-FB84-851E962FB840} = C:/WINDOWS/SYSTEM32/BDGIA.DLL O22 - SHAREDTASKSCHEDULER: () - {41D952EA-62EA-1DA5-2FB7-C840C952EB74} = C:/WINDOWS/SYSTEM32/KNPHJ.DLL O22 - SHAREDTASKSCHEDULER: () - {30C841DA-51E9-0C94-1EA6-B74FC851EA73} = C:/WINDOWS/SYSTEM32/DGIAC.DLL O22 - SHAREDTASKSCHEDULER: () - {FC840D96-1DA5-C850-DA62-730B841DA63F} = C:/WINDOWS/SYSTEM32/JMOGI.DLL O22 - SHAREDTASKSCHEDULER: () - {63FB740C-840C-3FC7-41D9-EA62EB740D96} = C:/WINDOWS/SYSTEM32/UXZRT.DLL O22 - SHAREDTASKSCHEDULER: () - {841C952E-962E-41D9-62FA-FC840D962FB8} = C:/WINDOWS/SYSTEM32/QSVMP.DLL O22 - SHAREDTASKSCHEDULER: () - {B740C851-C952-740D-952E-2FB830C952EB} = C:/WINDOWS/SYSTEM32/VXACU.DLL O22 - SHAREDTASKSCHEDULER: () - {C851D962-DA63-851E-A63F-30C941D962FB} = C:/WINDOWS/SYSTEM32/KMPRJ.DLL O22 - SHAREDTASKSCHEDULER: () - {63FB730C-740C-3FB7-40D8-DA62EB740D96} = C:/WINDOWS/SYSTEM32/QTVNP.DLL O22 - SHAREDTASKSCHEDULER: () - {30C841DA-51EA-0C95-1EA6-B74FC851DA63} = C:/WINDOWS/SYSTEM32/BEGYA.DLL O22 - SHAREDTASKSCHEDULER: () - {0D951EA7-2EB6-D961-EB73-841C952EB740} = C:/WINDOWS/SYSTEM32/SVXPR.DLL O22 - SHAREDTASKSCHEDULER: () - {1EA72FB8-3FC8-EA73-FC85-952EA63FC851} = C:/WINDOWS/SYSTEM32/VYADU.DLL O22 - SHAREDTASKSCHEDULER: () - {D962EA73-EB74-962F-B740-41DA52EA730C} = C:/WINDOWS/SYSTEM32/BDGIA.DLL O22 - SHAREDTASKSCHEDULER: () - {B74FC851-C951-740C-952D-2FB730C952EA} = C:/WINDOWS/SYSTEM32/FHKBE.DLL O22 - SHAREDTASKSCHEDULER: () - {41D952EB-62FA-1DA5-2FB7-C850D952EB74} = C:/WINDOWS/SYSTEM32/QTVNP.DLL O22 - SHAREDTASKSCHEDULER: () - {D961EA73-EB73-962E-B74F-41D951EA730C} = C:/WINDOWS/SYSTEM32/ZBEVY.DLL O22 - SHAREDTASKSCHEDULER: () - {EA62EB74-FB83-A63E-B840-51E962FB841D} = C:/WINDOWS/SYSTEM32/SUWOQ.DLL O22 - SHAREDTASKSCHEDULER: () - {C850D962-DA62-851D-A63E-30C840D962FB} = C:/WINDOWS/SYSTEM32/ACFWZ.DLL O22 - SHAREDTASKSCHEDULER: () - {52EA62FB-63FC-2EA7-3FC8-C952DA63FC85} = C:/WINDOWS/SYSTEM32/FIKME.DLL O22 - SHAREDTASKSCHEDULER: () - {A63FB740-B841-63FC-841D-1EA72FB840D9} = C:/WINDOWS/SYSTEM32/YADFX.DLL O22 - SHAREDTASKSCHEDULER: () - {952EA63F-A730-52EB-730C-0D961EA730C8} = C:/WINDOWS/SYSTEM32/RTWYQ.DLL O22 - SHAREDTASKSCHEDULER: () - {FC850D96-1DA6-C851-DA63-730C841DA63F} = C:/WINDOWS/SYSTEM32/LOQTK.DLL O22 - SHAREDTASKSCHEDULER: () - {EA63EB74-FB84-A63F-B841-51EA62FB841D} = C:/WINDOWS/SYSTEM32/IKMPG.DLL O22 - SHAREDTASKSCHEDULER: () - {EB73FC85-0C94-B74F-C951-62FA730C952E} = C:/WINDOWS/SYSTEM32/QTVNP.DLL O22 - SHAREDTASKSCHEDULER: () - {C851D962-DA62-851E-A63F-30C840D962FB} = C:/WINDOWS/SYSTEM32/IKNPH.DLL O22 - SHAREDTASKSCHEDULER: () - {2FB830C9-40D9-FB84-0D96-A63FB740D962} = C:/WINDOWS/SYSTEM32/QTVYP.DLL O22 - SHAREDTASKSCHEDULER: () - {B740C851-C952-740D-952E-2FB830C851EA} = C:/WINDOWS/SYSTEM32/DFIKC.DLL O22 - SHAREDTASKSCHEDULER: () - {740C841D-851D-40C8-51E9-EB73FC851EA7} = C:/WINDOWS/SYSTEM32/ZCEWY.DLL O22 - SHAREDTASKSCHEDULER: () - {FB74FC85-0C95-B740-C952-62FB730C952E} = C:/WINDOWS/SYSTEM32/JLNQH.DLL O22 - SHAREDTASKSCHEDULER: () - {730C841D-851E-30C9-51EA-EB74FC851EA7} = C:/WINDOWS/SYSTEM32/HJMOG.DLL O22 - SHAREDTASKSCHEDULER: () - {952EA63F-A730-52EB-730C-0D961EA730C9} = C:/WINDOWS/SYSTEM32/DFIKC.DLL O22 - SHAREDTASKSCHEDULER: () - {EA72FB74-FB83-A73F-C840-51E962FB841D} = C:/WINDOWS/SYSTEM32/OQTKN.DLL O22 - SHAREDTASKSCHEDULER: () - {D961EA73-EB73-962F-B74F-41D951EA730C} = C:/WINDOWS/SYSTEM32/DFIZC.DLL O22 - SHAREDTASKSCHEDULER: () - {B74FC851-C951-740C-952D-2FB730C951EA} = C:/WINDOWS/SYSTEM32/VXARU.DLL O22 - SHAREDTASKSCHEDULER: () - {62EB63FC-730C-2EB7-30C9-D962EA730C95} = C:/WINDOWS/SYSTEM32/CEGJA.DLL O22 - SHAREDTASKSCHEDULER: () - {A63FB740-B841-63FC-841D-1EA72FB841D9} = C:/WINDOWS/SYSTEM32/ACFHZ.DLL O22 - SHAREDTASKSCHEDULER: () - {52EB63FB-73FC-2EB7-30C8-D952DA63FC85} = C:/WINDOWS/SYSTEM32/ZCEHY.DLL O22 - SHAREDTASKSCHEDULER: () - {FB73FC85-0C94-B74F-C951-62FA730C952E} = C:/WINDOWS/SYSTEM32/XZBTV.DLL O22 - SHAREDTASKSCHEDULER: () - {30C941DA-51EA-0C95-1EA7-B740C851DA63} = C:/WINDOWS/SYSTEM32/DGILC.DLL O22 - SHAREDTASKSCHEDULER: () - {2FB730C9-40D8-FB83-0D95-A63EB740D962} = C:/WINDOWS/SYSTEM32/QTVNP.DLL O22 - SHAREDTASKSCHEDULER: () - {1EA72FB8-3FC8-EA73-FC85-952EA63FC841} = C:/WINDOWS/SYSTEM32/DGILC.DLL O22 - SHAREDTASKSCHEDULER: () - {A73FB740-B841-73FC-841D-1EA72FB841DA} = C:/WINDOWS/SYSTEM32/EHJLD.DLL O22 - SHAREDTASKSCHEDULER: () - {FB840C95-0D95-B841-D962-63FB730C952E} = C:/WINDOWS/SYSTEM32/XZCEW.DLL O22 - SHAREDTASKSCHEDULER: () - {1D951EA7-2EB6-D961-EB73-841C952EB740} = C:/WINDOWS/SYSTEM32/LNPHJ.DLL O22 - SHAREDTASKSCHEDULER: () - {851D952E-962F-51DA-62FB-FC850D962FB8} = C:/WINDOWS/SYSTEM32/SVXZR.DLL O22 - SHAREDTASKSCHEDULER: () - {EA73FB84-FC85-A730-C851-52EB63FB841D} = C:/WINDOWS/SYSTEM32/KMPRJ.DLL O22 - SHAREDTASKSCHEDULER: () - {0C951D96-1DA6-C951-EA63-730C841DA63F} = C:/WINDOWS/SYSTEM32/YADFX.DLL O22 - SHAREDTASKSCHEDULER: () - {C851D962-DA63-851E-A63F-30C941DA63FB} = C:/WINDOWS/SYSTEM32/SUXZR.DLL O22 - SHAREDTASKSCHEDULER: () - {0C941D96-1DA5-C951-EA62-730B841DA63F} = C:/WINDOWS/SYSTEM32/UWZQT.DLL O22 - SHAREDTASKSCHEDULER: () - {0C850D96-1DA6-C851-DA63-730C841DA63F} = C:/WINDOWS/SYSTEM32/QSUXO.DLL O22 - SHAREDTASKSCHEDULER: () - {A63FB740-B841-63FC-841D-1EA72FB841DA} = C:/WINDOWS/SYSTEM32/CEHJB.DLL O22 - SHAREDTASKSCHEDULER: () - {D961EA63-EA72-962E-B73F-40D851EA730C} = C:/WINDOWS/SYSTEM32/LNQHK.DLL O22 - SHAREDTASKSCHEDULER: () - {EB74FC85-0C95-B740-C952-62FB730C952E} = C:/WINDOWS/SYSTEM32/SVXAR.DLL O22 - SHAREDTASKSCHEDULER: () - {D962EA63-EA73-962E-B730-40D951EA730C} = C:/WINDOWS/SYSTEM32/XZCEW.DLL O22 - SHAREDTASKSCHEDULER: () - {2FB830C9-40D9-FB84-0D96-A63FB740C952} = C:/WINDOWS/SYSTEM32/EHJMD.DLL O22 - SHAREDTASKSCHEDULER: () - {2FB830C9-40D9-FB84-0D96-A63FB740D952} = C:/WINDOWS/SYSTEM32/GJLOF.DLL O22 - SHAREDTASKSCHEDULER: () - {D962EA73-EB73-962F-B740-41D951EA730C} = C:/WINDOWS/SYSTEM32/DFIKC.DLL O22 - SHAREDTASKSCHEDULER: () - {2FB730C9-40D8-FB83-0D95-A63EB740D952} = C:/WINDOWS/SYSTEM32/YBDVX.DLL O22 - SHAREDTASKSCHEDULER: () - {52EA63FB-73FB-2EB6-30C8-D951DA63FC85} = C:/WINDOWS/SYSTEM32/PSUMO.DLL O22 - SHAREDTASKSCHEDULER: () - {FB840C85-0C95-B840-D952-62FB730C952E} = C:/WINDOWS/SYSTEM32/ZBEGY.DLL O22 - SHAREDTASKSCHEDULER: () - {FB830C85-0C94-B840-D951-62FA730C952E} = C:/WINDOWS/SYSTEM32/PRULO.DLL O22 - SHAREDTASKSCHEDULER: () - {EA73FB84-FC84-A730-C851-52EA62FB841D} = C:/WINDOWS/SYSTEM32/SUXZR.DLL O22 - SHAREDTASKSCHEDULER: () - {C851D962-DA63-851E-A63F-30C941DA62FB} = C:/WINDOWS/SYSTEM32/UWZBT.DLL O22 - SHAREDTASKSCHEDULER: () - {30C841DA-51E9-0C94-1EA6-B74FC851EA63} = C:/WINDOWS/SYSTEM32/XACUW.DLL O22 - SHAREDTASKSCHEDULER: () - {D961EA73-EB73-962E-B74F-41D952EA730C} = C:/WINDOWS/SYSTEM32/VXARU.DLL O22 - SHAREDTASKSCHEDULER: () - {1EA62FB8-3FC7-EA72-FC84-952DA63FC841} = C:/WINDOWS/SYSTEM32/FIKCE.DLL O22 - SHAREDTASKSCHEDULER: () - {EA73FB74-FB84-A73F-C841-51EA62FB841D} = C:/WINDOWS/SYSTEM32/IKNPH.DLL O22 - SHAREDTASKSCHEDULER: () - {C850D962-DA62-851E-A63E-30C840D962FB} = C:/WINDOWS/SYSTEM32/SUXOR.DLL O23 - 服务: ASYNCMAC (RAS ASYNCHRONOUS MEDIA DRIVER) - SYSTEM32/DRIVERS/COMINT32.SYS (自动) O23 - 服务: MYSEE2_RUNTIME (MYSEE2_RUNTIME) - C:/WINDOWS/SYSTEM32/SVCHOST.EXE -K MYSEE2 -> C:/WINDOWS/SYSTEM32/GY/RUNTIME.DLL (禁用) O23 - 服务: PCIHARDDISK (PCIHARDDISK) - C:/WINDOWS/SYSTEM32/DRIVERS/FAT32.SYS (手动) O23 - 服务: RZEDSIG (RZEDSIG) - SYSTEM32/DRIVERS/RZEDSIG.SYS (引导) O23 - 服务: TK71OV01 (TK71OV01) - C:/WINDOWS/SYSTEM32/DRIVERS/TK71OV01.SYS (自动) O24 - SHLEXECHOOK: [] - {BF37BF37-37BF-F37B-C048-159D159D159D} = C:/WINDOWS/SYSTEM32/JZPFR.DLL O24 - SHLEXECHOOK: [] - {F37BF37B-7BF3-37BF-048C-59D159D159D1} = C:/WINDOWS/SYSTEM32/LBRHX.DLL ===/ 从 log 中的 O23 - 服务: PciHardDisk (PciHardDisk) - C:/WINDOWS/system32/drivers/fat32.sys(手动)
