2008-12-30 8:44 D:\工具\QQ2009\Bin\QQ.exe Direct Disk Access PhysicalDrive0
2008-12-30 8:44 D:\工具\QQ2009\Bin\QQ.exe Create Process C:\Sandbox\Fuck_You\QQBox\user\current\Local Settings\Temp\selfupdate.exe
2008-12-30 8:44 D:\工具\QQ2009\Bin\QQ.exe Create Process D:\工具\QQ2009\Bin\auclt.exe
2008-12-30 8:47 C:\Program Files\Internet Explorer\iexplore.exe Create Process C:\Program Files\SogouInput\3.6.0.1653\PinyinUp.exe
2008-12-30 8:47 D:\工具\QQ2009\Bin\QQ.exe Access Memory System
2008-12-30 8:48 D:\工具\QQ2009\Bin\QQ.exe Access Memory C:\WINDOWS\system32\services.exe
2008-12-30 8:48 D:\工具\QQ2009\Bin\QQ.exe Access Memory C:\WINDOWS\system32\svchost.exe
2008-12-30 8:48 D:\工具\QQ2009\Bin\QQ.exe Access Memory C:\WINDOWS\system32\spoolsv.exe
2008-12-30 8:48 D:\工具\QQ2009\Bin\QQ.exe Access Memory C:\Program Files\Returnil\Returnil.exe
2008-12-30 8:49 D:\工具\QQ2009\Bin\QQ.exe Access Memory C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
2008-12-30 8:49 D:\工具\QQ2009\Bin\QQ.exe Access Memory C:\Program Files\Sandboxie\SbieCtrl.exe
2008-12-30 8:49 D:\工具\QQ2009\Bin\QQ.exe Access Memory C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
2008-12-30 8:49 D:\工具\QQ2009\Bin\QQ.exe Access Memory C:\Program Files\Sandboxie\SbieSvc.exe
2008-12-30 8:49 D:\工具\QQ2009\Bin\QQ.exe Access Memory C:\WINDOWS\system32\alg.exe
2008-12-30 8:49 D:\工具\QQ2009\Bin\QQ.exe Access Memory C:\WINDOWS\system32\wbem\wmiprvse.exe
2008-12-30 8:49 D:\工具\QQ2009\Bin\QQ.exe Access Memory C:\WINDOWS\system32\dllhost.exe
2008-12-30 8:49 D:\工具\QQ2009\Bin\QQ.exe Access Memory C:\Program Files\mympc\mplayerc.exe
2008-12-30 8:49 D:\工具\QQ2009\Bin\QQ.exe Access Memory C:\Program Files\Sandboxie\SandboxieDcomLaunch.exe
2008-12-30 8:49 D:\工具\QQ2009\Bin\QQ.exe Access Memory D:\工具\QQ2009\Bin\TXPlatform.exe
2008-12-30 8:49 D:\工具\QQ2009\Bin\QQ.exe Access Memory C:\Program Files\Internet Explorer\iexplore.exe
2008-12-30 8:50 D:\工具\QQ2009\Bin\QQ.exe Direct Disk Access C:



来自：http://bbs.kafan.cn/thread-396639-1-1.html