Storm_Center

[GP_CLT_Service / GP_CLT_Service][Running/Auto Start]
  <C:\WINDOWS\system32\GP_CLT_Service.exe>

C:\WINDOWS\system32\GP_CLT_Service.exe
C:\WINDOWS\system32\GP_CLT.exe

[KailleraServer / KailleraServer][Stopped/Manual Start]
  <C:\WINDOWS\system32\kaillera\srvany.exe><N/A>
[kailleraServerJK / kailleraServerJK][Stopped/Manual Start]
  <C:\WINDOWS\system32\kaillera\srvany.exe><N/A>

[LF3_BHO Class]
  {43D29D14-460E-4F3A-9037-E60F11EF12F0} <C:\WINDOWS\system32\LightFrame3IECOM.dll, >

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <Gemplus Reader Resource Manager><C:\Program Files\Gemplus\GemSafe Libraries\BIN\RRMSVR.exe>  [Gemplus]
    <RegTool><C:\Program Files\Gemplus\GemSafe Libraries\BIN\RegTool.exe> 
    <gemstrmw><C:\WINDOWS\system32\gemstrmw.exe /r>  [Gemplus]
...

C:\WINDOWS\system32\CmdLineExt.dll [Sony DADC Austria AG]
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\Temp\CmdLineExt02.dll

魔兽争霸之冰封王座、虚幻、天堂II等游戏运行时会释放出CmdLineExt.dll 、CmdLineExt02.dll，并插入Explorer.EXE进程。据了解CmdLineExt.dll或CmdLineExt02.dll都是由SecuROM生成，以上这些游戏使用SecuROM版权保护技术，个别杀毒软件会对其误报木马。

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <csrsses><c:\windows\csrsses.exe>  [Microsoft Corporation]

[C:\windows\csrssesx.dll]  [airSudio, 4.0.0.0]
隐藏进程：   [192] C:\windows\csrsses.exe

[SjyPkt / SjyPkt][Stopped/Manual Start]
  <\??\C:\WINDOWS\System32\Drivers\SjyPkt.sys><Windows (R) 2000 DDK provider>

[st3bus28 / st3bus28][Stopped/Manual Start]
  <system32\DRIVERS\st3bus28.sys><N/A>
[st3mp28 / st3mp28][Stopped/Manual Start]
  <system32\DRIVERS\st3mp28.sys><N/A>

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ImpsSensor]
    <WinlogonNotify: ImpsSensor><ImpsSensor.dll>  [N/A]

[BETOP C036 / GAFilter][Running/Auto Start]
  <system32\DRIVERS\B036.sys><N/A>