在这里

独恋伊影

1. 
   
2. 2008-05-22,20:37:43
   ! j9 h$ K- C! ^- Z
3. System Repair Engineer 2.5.16.900
   8 i* o* Q: Q1 \
4. Smallfrogs (http://www.KZTechs.com)
   
5. Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能
   
6. 以下内容被选中：
   $ e& p. b' N! [! O
7.     所有的启动项目（包括注册表、启动文件夹、服务等）
   ! x% E1 E' f" s* I% p
8.     浏览器加载项
   
9.     正在运行的进程（包括进程模块信息）
   6 ]+ t$ Y( Z! V
10.     文件关联
    : c) J, S/ n4 e$ z" C6 F1 i
11.     Winsock 提供者
    
12.     Autorun.inf
    " o) ~/ o" F. C  A  u
13.     HOSTS 文件
    & a/ e4 ~" t% S3 r7 g" |
14.     进程特权扫描
    
15. 
    
16. 启动项目
    ! {7 s# ?& N1 t2 S
17. 注册表
    
18. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    " }& f2 R, Z5 E3 |! B7 o( a
19.     <ctfmon.exe><C:\WINDOWS\system32\CTFMON.EXE>  [(Verified)Microsoft Windows Publisher]
    $ j, r1 ]3 b; W$ B7 F) q8 E
20. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    
21.     <360Safebox><"C:\Program Files\360Safebox\safeboxTray.exe" /r>  [(Verified)Qizhi Software (beijing) Co. Ltd]
    ) V( V, g# d& o; A3 K2 G& Q: C( h
22.     <360Safetray><C:\Program Files\360safe\safemon\360tray.exe /start>  [(Verified)Qizhi Software (beijing) Co. Ltd]
    1 T2 U9 H6 t9 e
23.     <360Antiarp><C:\Program Files\360safe\AntiArp\AntiArp.exe /start>  [(Verified)Qizhi Software (beijing) Co. Ltd]
    
24.     <KavStart><"C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KAVStart.exe" -startup>  [(Verified)KINGSOFT CORPORATION]
    
25.     <IMJPMIG8.1><; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32>  [N/A]
    " @$ P  X3 z- i$ n& N4 W
26.     <PHIME2002A><; >  [N/A]
    " E" k  F. _+ S: N
27.     <PHIME2002ASync><; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32>  [N/A]
    
28. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    * A" w; g7 L& V! ~, g1 k  n
29.     <shell><Explorer.exe>  [(Verified)Microsoft Windows Component Publisher]
    * N' z  U; Y6 ^2 b5 h
30.     <Userinit><C:\WINDOWS\system32\UserInit.exe,>  [(Verified)Microsoft Windows Publisher]
    0 s% o8 F5 V  Z$ A9 A5 E
31.     <UIHost><logonui.exe>  [(Verified)Microsoft Windows Publisher]
    
32. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    " ?/ g' `0 o2 j! F1 X$ y
33.     <{AC2DC2EF-5165-40A3-8CDF-41DCA1B0901A}><C:\WINDOWS\system32\shlhook.dll>  [Beijing Rising Technology Co., Ltd.]
    4 }  A6 n: y( s
34. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
    ! `, y7 N5 C' O( ]
35.     <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE>  [N/A]
    1 f% ^9 l- r' |
36. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
    / v7 K4 L9 j: [
37.     <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [N/A]
    
38. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
    
39.     <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [N/A]
    ; F! w( s' ^- E
40. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
    
41.     <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [N/A]
    8 A4 v9 |) s% s( E+ r, X
42. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
    ) }8 l5 K1 s2 @
43.     <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Remove.PerUser.NT>  [(Verified)Microsoft Windows Publisher]
    
44. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
    7 P- M3 \* |/ C
45.     <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser>  [(Verified)Microsoft Windows Publisher]
    
46. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
    
47.     <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp10.inf,PerUserStub>  [(Verified)Microsoft Windows Publisher]
    % Q! n% o/ o% F
48. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
    ( G0 T2 t/ C  M1 E
49.     <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [N/A]
    8 ]2 c" d) D+ T3 J% X4 n
50. ==================================
    - s- h7 x6 y: B* S( n9 W* J
51. 启动文件夹
    0 ~$ s4 C& n; F8 C# q' ~& Z; V
52. N/A
    
53. ==================================
    / U" Z5 M2 H& e& S+ a
54. 服务
    ) Q# x4 L  }" q
55. [3ware Controller Service / 3wareSrv][Stopped/Auto Start]
    
56.   <C:\WINDOWS\System32\3wareSrv.exe><N/A>
    
57. [Google Updater Service / gusvc][Stopped/Manual Start]
    & v# g: v$ ~6 p
58.   <"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"><Google>
    
59. [Help and Support / helpsvc][Stopped/Disabled]
    
60.   <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll><N/A>
    ( H8 d$ y% k9 \/ f5 Q+ Z: Q  n
61. [Human Interface Device Access / HidServ][Stopped/Boot Start]
    
62.   <\SystemRoot\C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
    7 v4 [) F& H) E
63. [Kingsoft Internet Security Common Service / KISSvc][Stopped/Auto Start]
    
64.   <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KISSvc.EXE><Kingsoft Corporation>
    8 j9 C( j5 z8 E8 s  a& \' h# ^
65. [Kingsoft Personal Firewall Service / KPfwSvc][Running/Auto Start]
    $ o- _/ m, o+ @, z! V0 W
66.   <"C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KPfwSvc.EXE"><Kingsoft Corporation>
    9 r% L/ c$ M5 z2 f
67. [Kingsoft Antivirus KWatch Service / KWatchSvc][Running/Auto Start]
    / C; p) C, r7 m# }" v3 o: R2 Y# T% a
68.   <"C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KWatch.EXE"><Kingsoft Corporation>
    - D3 M+ n( T8 G/ U/ o2 b* I. p
69. [NetMeeting Remote Desktop Sharing / mnmsrvc][Stopped/Manual Start]
    1 p9 [! Y/ b' b; ^( o$ y
70.   <><N/A>
    
71. [Qvod Terminal / Qvod Terminal][Running/Auto Start]
    
72.   <C:\Program Files\QvodPlayer\QvodTerminal.exe><Shenzhen QVOD Technology Co.,Ltd>
    * q. i( f! S! U& j- K- }9 o
73. ==================================
    
74. 驱动程序
    
75. [22j / 22jn][Stopped/Boot Start]
    
76.   <\SystemRoot\System32\DRIVERS\22jn.sys><N/A>
    * T3 Z: p$ l) d0 E* I+ W
77. [360AntiArp / 360AntiArp][Running/System Start]
    
78.   <\??\C:\WINDOWS\system32\drivers\360AntiArp.sys><360安全中心>
    
79. [43ec / 43ecu][Stopped/Boot Start]
    , W4 F, U# m7 K* @4 c4 S' |
80.   <\SystemRoot\System32\DRIVERS\43ecu.sys><N/A>
    
81. [Intel(r) 82801 Audio Driver Install Service (WDM) / ac97intc][Running/Manual Start]
    
82.   <system32\drivers\ac97intc.sys><Intel Corporation>
    
83. [Promise driver accelerator / bb-run][Running/Boot Start]
    ' w+ W# b  E: _7 U- t6 `
84.   <\SystemRoot\system32\DRIVERS\bb-run.sys><Promise Technology, Inc.>
    3 u+ U8 A% n# `  v* L* y& k
85. [Promise Removable Disk Control Driver / dontgo][Running/Boot Start]
    7 \8 E) W6 Z4 V: g( R
86.   <\SystemRoot\system32\DRIVERS\DontGo.sys><Promise Technology, Inc.>
    
87. [KAVBase / KAVBase][Running/Auto Start]
    7 u6 ~' G- R8 c+ Q. J
88.   <\??\C:\WINDOWS\system32\Drivers\KAVBase.sys><Kingsoft Corporation>
    
89. [KAVBootC / KAVBootC][Running/Boot Start]
    
90.   <\SystemRoot\system32\Drivers\KAVBootC.sys><Kingsoft Corporation>
    
91. [KAVSafe / KAVSafe][Running/Auto Start]
    7 u, v9 w7 J) `" [# v
92.   <\??\C:\WINDOWS\system32\Drivers\KAVSafe.sys><Kingsoft Corporation>
    
93. [KNetWch / KNetWch][Running/System Start]
    9 D2 H. l4 P2 g4 e+ l
94.   <\??\C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KNetWch.SYS><Kingsoft Corporation>
    
95. [KWatch3 / KWatch3][Running/Auto Start]
    
96.   <\??\C:\WINDOWS\system32\drivers\KWatch3.SYS><Kingsoft Corporation>
    * M# r" |. P$ T$ L; y
97. [ntptdb / ntptdb][Stopped/Auto Start]
    ) m. N! u3 c  X9 f$ I" W
98.   <\??\C:\Documents and Settings\All Users\Application Data\Microsoft\Office\SYSTEM\ntptdb.sys><N/A>
    % {/ \- X" t5 T# {
99. [nv / nv][Running/Manual Start]
    5 B% K" D3 O) `5 U9 Y/ S3 Z! P
100.   <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
     
101. [NVIDIA nForce RAID Driver / nvrd32][Running/Boot Start]
     
102.   <\SystemRoot\system32\DRIVERS\nvrd32.sys><NVIDIA Corporation>
     . V- s6 i2 z3 W' L* G
103. [DDK PACKET Protocol / Packet][Running/Manual Start]
     1 R* \9 L1 \7 k+ Z4 f
104.   <system32\DRIVERS\ProtoDrv.sys><360安全中心>
     ! N' k: t7 ^7 U6 M% ?- y
105. [pnduojtwbt / pnduojtwbt][Stopped/Boot Start]
     
106.   <\SystemRoot\system32\drivers\pnduojtwbt.sys><N/A>
     
107. [Direct Parallel Link Driver / Ptilink][Running/Manual Start]
     * x' s5 E% {( |
108.   <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
     
109. [RsAntiSpyware / RsAntiSpyware][Stopped/Boot Start]
     8 H6 ?2 \- H( ^' T; a, ~+ A0 n) g
110.   <\SystemRoot\system32\drivers\RsBoot.sys><N/A>
     
111. [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start]
     ) a9 l! c$ S5 |1 f* M  b5 P  w
112.   <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
     ' E# v% j7 J- \
113. [SafeBoxKrnl / SafeBoxKrnl][Running/System Start]
     # o- q& |9 T- I( g
114.   <\??\C:\Program Files\360Safebox\SafeBoxKrnl.sys><360安全中心>
     ( V) s7 Z9 }5 \* C2 q# H3 a
115. [Secdrv / Secdrv][Stopped/Manual Start]
     
116.   <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
     
117. [SATALink External Device Filter / SiRemFil][Running/Boot Start]
     ; D( ~" k( w4 e6 c) x; Q7 p4 ]1 P
118.   <\SystemRoot\system32\DRIVERS\SiRemFil.sys><Silicon Image, Inc.>
     
119. [System Restore Filter Driver / sr][Stopped/Disabled]
     $ t2 _/ R) f* q/ ?! s. h9 U4 a
120.   <system32\DRIVERS\sr.sys><N/A>
     5 M% s$ ^( O' N* T
121. [TesSafe / TesSafe][Stopped/Manual Start]
     * g6 P. j# ~7 [) v
122.   <\??\C:\WINDOWS\system32\TesSafe.sys><TENCENT>
     2 L' g  t! p4 l6 q( d% V
123. [System Services / unzxzsrs][Stopped/Boot Start]
     / t0 Q( u# @* T5 m' ?
124.   <\SystemRoot\system32\drivers\unzxzsrs.sys><N/A>
     
125. [ViBus / ViBus][Stopped/Boot Start]
     ) {* `* ~! [, ^5 _1 Y6 T% H
126.   <\SystemRoot\system32\DRIVERS\ViBus.sys><N/A>
     7 b( P0 u2 Q# h, ]# k( V" A  [! s
127. [World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start]
     
128.   <system32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>
     
129. [VIA SATA IDE Hot-plug Driver / xfilt][Running/Boot Start]
     
130.   <\SystemRoot\system32\DRIVERS\xfilt.sys><VIA Technologies,Inc>
     
131. [ATI Extend / zhibmaso][Stopped/Boot Start]
     0 ?3 j: g( S+ A0 e6 I1 z
132.   <\SystemRoot\system32\drivers\zhibmaso.sys><N/A>
     
133. [Vimicro USB PC Camera (ZC0301PL) / ZSMC301b][Running/Manual Start]
     4 K2 P; I, y2 h& a  M  v
134.   <System32\Drivers\usbVM31b.sys><Vimicro Corporation>
     
135. ==================================
     1 m$ E& u* B8 f1 ]  e$ `( I& Q
136. 浏览器加载项
     / D# {0 w6 C0 A5 I* N: A7 e6 ~' r9 [
137. [Google Toolbar Helper]
     5 g3 c  x7 L/ Y1 l) \: p
138.   {AA58ED58-01DD-4d91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     4 A7 Z3 |. M" |/ W0 I
139. [Google Toolbar Notifier BHO]
     - m+ B5 u- \5 y" B8 x
140.   {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll, Google Inc.>
     : h3 |) S. N3 K+ n, A
141. [SafeMon Class]
     $ h1 Q0 l: s2 r- Q, `3 A9 k
142.   {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, 360.CN>
     , T. t) h( j: c  ~- Y0 _1 x
143. [kingsoft browser shield]
     
144.   {D963BE1A-6B35-47DB-B002-49FAE71D85CC} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KASBrowserShield.DLL, Kingsoft Corporation>
     
145. [IEBuddyExtControl Class]
     
146.   {3AECD3C1-7085-4731-96DC-47B6CF7EF749} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddyExt.DLL, Kingsoft Corporation>
     
147. [Zcom 杂志]
     5 ^1 }8 L) Y9 c! X
148.   {4045D313-1D5E-4fe4-93A0-A34630B6A00B} <C:\Zcom\E-Space.exe, N/A>
     
149. [&Google]
     
150.   {2318C2B1-4965-11d4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     1 `4 J% t' E5 \+ M  A" c
151. [KooPlayer Control]
     
152.   {C728DAB8-FDF5-4CD7-89DD-879D25794C77} <C:\WINDOWS\system32\CCTVKO~1.OCX, Koos>
     
153. [Shockwave Flash Object]
     3 E9 G; G/ u2 R4 J( M! `& x
154.   {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx, Adobe Systems, Inc.>
     
155. [KUpdateObj2 Class]
     ) ]/ r7 D' S5 r& c6 I5 ~) ^- [
156.   {D82303B7-A754-4DCB-8AFC-8CF99435AACE} <C:\WINDOWS\system32\KingSoft\KOS\UpdateOcx2.dll, Kingsoft Corporation>
     
157. [Google Script Object]
     / s, z! \  A' n1 }1 l# r
158.   {00EF2092-6AC5-47C0-BD25-CF2D5D657FEB} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     * t" T1 Q: E  G6 {* M0 E0 Y4 F
159. [EWA Control]
     
160.   {18226BF8-DC0B-4D81-80E9-A41AE37BB73A} <C:\PROGRA~1\PPLive\SYNACA~2.OCX, Synacast>
     * i: o! z5 y$ T: d8 P% }
161. [Windows Media Player]
     % S! n6 E* j% C6 v- ]3 O9 v  d$ M
162.   {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\msdxm.ocx, Microsoft Corporation>
     # w; }) ]0 H7 F
163. [&Google]
     ; j+ A' U( W( P4 N9 o$ L
164.   {2318C2B1-4965-11D4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     ) f3 H+ V- L4 }9 x* _
165. [HTML Document]
       n: B0 _, a% S! @, k
166.   {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
       h6 O/ _$ D, ]
167. [DHTML Edit Control Safe for Scripting for IE5]
     
168.   {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, Microsoft Corporation>
     5 j- S6 W$ a) x+ {3 [9 e+ s4 A
169. [RealPlayer RAM Download Handler]
     
170.   {2F542A2E-EDC9-4BF7-8CB1-87C9919F7F93} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
     3 f& I4 b( f/ c5 H, M
171. [IEBuddyExtControl Class]
     
172.   {3AECD3C1-7085-4731-96DC-47B6CF7EF749} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddyExt.DLL, Kingsoft Corporation>
     , R- w8 C. n5 v9 h& B' ^
173. [XML Document]
     
174.   {48123BC4-99D9-11D1-A6B3-00C04FD91555} <C:\WINDOWS\system32\msxml3.dll, Microsoft Corporation>
     . Y5 R; v% F  K! Z0 H+ G
175. [HHCtrl Object]
     
176.   {52A2AAAE-085D-4187-97EA-8C30DB990436} <C:\WINDOWS\system32\hhctrl.ocx, Microsoft Corporation>
     
177. [Windows Media Player]
     & g9 Y# J9 r  ~& O
178.   {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     9 b1 a* t2 |/ `  s* P: r+ x
179. [Active Desktop Mover]
     
180.   {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A>
     
181. [360SafeLive]
     ) \3 O2 l9 [8 W& m0 l
182.   {87515F61-A66C-4319-A0E0-D416CB8059E3} <C:\Program Files\360safe\live.dll, 360.cn>
     8 u* u0 l! {) A% I4 w# e$ f& B! R
183. [Microsoft Web 浏览器]
     
184.   {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
     
185. [Browser Enhanced Objects]
     ! n3 _  {" p, w# K" b. }: }) [
186.   {986488AF-13D5-9DDF-4FEF-9FB88698CFC1} <C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\USERDATA\webbrowser_2011.dll, N/A>
     0 n( I: c  r# U) W
187. [Google Toolbar Helper]
     
188.   {AA58ED58-01DD-4D91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     
189. [Microsoft Scriptlet Component]
     
190.   {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation>
     
191. [Google Toolbar Notifier BHO]
     , ]/ S6 f) h" P2 P8 Q
192.   {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll, Google Inc.>
     
193. [SearchAssistantOC]
     ) c9 u$ p2 ~6 t: v, `$ V
194.   {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
     
195. [SafeMon Class]
     
196.   {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, 360.CN>
     # F7 G- K9 v& n" q
197. [RDS.DataSpace]
     ' F, `. `6 [/ D3 M% _
198.   {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
       u2 z5 F/ t4 X% n0 x2 E+ |
199. [KooPlayer Control]
     6 \! `2 V6 [- j; p7 s  ]5 ~
200.   {C728DAB8-FDF5-4CD7-89DD-879D25794C77} <C:\WINDOWS\system32\CCTVKO~1.OCX, Koos>
     
201. [AUDIO__MID Moniker Class]
     + l1 f- \: B0 k  S4 f. i7 B
202.   {CD3AFA74-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     
203. [AUDIO__MP3 Moniker Class]
     8 t4 ?" n3 f+ P' L) h. e
204.   {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     8 a  i: t6 A% N2 \2 m9 p
205. [AUDIO__X_MS_WMA Moniker Class]
     
206.   {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     
207. [VIDEO__X_MS_WMV Moniker Class]
     ; ~# @* f! `3 v" G
208.   {CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     
209. [RealPlayer G2 Control]
     
210.   {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
     ) O: t# O* ]! x% B/ [2 P
211. [Shockwave Flash Object]
     3 Q- m: w. C  V. T
212.   {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx, Adobe Systems, Inc.>
     
213. [KUpdateObj2 Class]
     
214.   {D82303B7-A754-4DCB-8AFC-8CF99435AACE} <C:\WINDOWS\system32\KingSoft\KOS\UpdateOcx2.dll, Kingsoft Corporation>
     
215. [kingsoft browser shield]
     $ p5 T6 H+ q; Z' S/ o
216.   {D963BE1A-6B35-47DB-B002-49FAE71D85CC} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KASBrowserShield.DLL, Kingsoft Corporation>
     ) b# i6 z8 u+ b
217. [PasswordEditCtrl Class]
     # T9 V& t3 x8 ~% F$ m8 g1 }4 u6 k
218.   {E787FD25-8D7C-4693-AE67-9406BC6E22DF} <C:\WINDOWS\system32\qqedit\qqedit.dll, 腾讯科技（深圳）有限公司>
     
219. [QvodCtrl Class]
     " A/ }2 ^8 D, C8 p
220.   {F3D0D36F-23F8-4682-A195-74C92B03D4AF} <C:\Program Files\QvodPlayer\QvodInsert.dll, Shenzhen QVOD Technology Co.,Ltd>
     7 `, K$ ^, h' k* f- p
221. [&使用超级旋风下载]
     
222.   <C:\Program Files\Tencent\QQDownload\geturl.htm, N/A>
     
223. [&使用超级旋风下载全部链接]
     
224.   <C:\Program Files\Tencent\QQDownload\getAllurl.htm, N/A>
     2 X) |4 U6 I5 d2 ]) ^; s
225. [使用迅雷下载]
     
226.   <, N/A>
     5 |" n; W$ u# W0 F& r* k" M, h* W
227. [使用迅雷下载全部链接]
     
228.   <, N/A>
     
229. [导出到 Microsoft Office Excel(&X)]
       C& D1 G# W7 R$ l5 ]( T
230.   <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
     3 f4 [& _" s$ @9 t! _
231. [添加到QQ表情]
     - P( }* `7 O- x. v
232.   <C:\Program Files\Tencent\QQ\AddEmotion.htm, N/A>
     
233. ==================================
     
234. 正在运行的进程
     ) Z7 F! e8 W: W& R8 Z
235. [PID: 444 / SYSTEM][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
236. [PID: 496 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     6 T% p0 q* ~, x: P: e( ^
237. [PID: 520 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
238.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
     
239. [PID: 564 / SYSTEM][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     # a' f/ f  J; B' p! C1 a' o
240. [PID: 576 / SYSTEM][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     0 o; B& j; g3 f; k' R' d6 z
241. [PID: 720 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     : v7 I6 \$ }8 j
242. [PID: 780 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
243. [PID: 856 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     . s& U5 ?/ B% J6 A+ m
244. [PID: 944 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     % R0 K) M& C2 Q' m$ B
245. [PID: 1012 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
246. [PID: 1236 / Administrator][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_qfe.070613-1311)]
     ( l) {" Z( Q9 a( V; c/ O
247.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
248.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
249.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
     
250.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     5 Y: A. z5 m( J8 V1 |
251.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KAVEXT.DLL]  [Kingsoft Corporation, 2008,05,07,373]
     ) B4 N! [" J) ]7 K% A
252.     [C:\Program Files\Tencent\QQ\qdshm.dll]  [, 1, 0, 101, 20]
     
253.     [C:\Program Files\Tencent\QQ\MFC42.DLL]  [Microsoft Corporation, 6.00.8665.0]
     7 @: w  l5 N) }7 Q& o( k/ |
254.     [C:\Program Files\WinRAR\rarext.dll]  [N/A, ]
     
255.     [C:\WINDOWS\system32\shlhook.dll]  [Beijing Rising Technology Co., Ltd., 4.0.0.9]
     
256.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     2 a( e) _) X+ T
257.     [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
     
258. [PID: 1332 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
     
259.     [C:\WINDOWS\system32\mdimon.dll]  [Microsoft Corporation, 11.3.8166.2]
     
260.     [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll]  [Microsoft Corporation, 11.3.8166.2]
     ; T$ k) {$ e$ p/ ?5 w* u
261. [PID: 1540 / Administrator][C:\Program Files\360safe\AntiArp\AntiArp.exe]  [360安全中心, 2, 0, 0, 1008]
     ' }4 ^" a) y# @7 k9 u
262.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
263.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
264.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
265.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
266. [PID: 1560 / Administrator][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
267.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
268.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     0 X7 z; l4 b. D6 L
269.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
270. [PID: 1576 / Administrator][C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe]  [Google Inc., 2, 0, 301, 1654]
     
271.     [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\gtn.dll]  [Google Inc., 2, 0, 301, 7164]
     4 ^4 k8 U+ }) b# @  C7 t5 H7 B
272.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     ; T( P! [; y" U: v5 d2 J; l
273.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     ' k. I8 \: ]5 s3 y/ K! c6 z' D! T
274.     [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\res_zh-CN.dll]  [Google Inc., 2, 0, 301, 7164]
     8 C! i2 |. l# V
275.     [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll]  [Google Inc., 2, 0, 301, 7164]
     ! n4 p% d" z- V
276.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
277.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     1 Z1 M; F* O2 }! l3 F
278. [PID: 1648 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     1 F& d* M' e' c  V) ?
279. [PID: 1744 / SYSTEM][C:\Program Files\QvodPlayer\QvodTerminal.exe]  [Shenzhen QVOD Technology Co.,Ltd, 2, 5, 0, 53]
     
280. [PID: 1860 / SYSTEM][C:\WINDOWS\system32\skeys.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
281. [PID: 1908 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     - p# i. h/ ?, V- `1 c
282. [PID: 1964 / LOCAL SERVICE][C:\WINDOWS\system32\wdfmgr.exe]  [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
     3 o& K* o/ @. f1 p. c, x1 M) H/ {7 E) v
283. [PID: 2772 / Administrator][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
     3 P$ n1 b6 ~0 o+ U  e
284.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     6 |/ Z" c* K* h( S( L
285.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
286.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     $ Q2 Q& ~: C( e
287.     [c:\program files\google\googletoolbar2.dll]  [Google Inc., 4, 0, 1606, 6690]
     8 m8 F: c- ]  G/ q: q' J
288.     [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll]  [Google Inc., 2, 0, 301, 7164]
     
289.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KASBrowserShield.DLL]  [Kingsoft Corporation, 2008,04,15,2]
     
290.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddy.dll]  [Kingsoft Corporation, 2008,04,15,2]
     7 e0 x0 d" `6 o0 W  a/ h
291.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddyExt.DLL]  [Kingsoft Corporation, 2008,05,14,83]
     4 M5 G* T3 s# ]' \( l& `
292.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KANTray.dll]  [Kingsoft Corporation, 2008,04,15,2]
     
293.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KAVAFish.DLL]  [Kingsoft Corporation, 2008,05,13,78]
     
294.     [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
     ' E# X2 }3 |! P6 c; w
295.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
     
296.     [C:\WINDOWS\system32\WN.IME]  [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
     
297.     [C:\Program Files\ShiQiang\wnime\Dll32\wnpy_StatusWnd.dll]  [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
     
298.     [C:\Program Files\ShiQiang\wnime\Dll32\wnpy_CompWnd.dll]  [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
     0 ^4 A  B& B2 m) y/ q# k  u+ G) B
299.     [C:\Program Files\ShiQiang\wnime\Dll32\wnpy_Query.dll]  [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
     
300.     [C:\WINDOWS\system32\SOGOUPY.IME]  [Sogou.com Inc., 3.2.0.0]
     
301.     [C:\Documents and Settings\Administrator\My Documents\SogouInput\Plugin\SgImeWord.dll]  [Sogou.com Inc., 3.2.0.0]
     
302.     [C:\WINDOWS\system32\WINWB98.IME]  [Microsoft Corporation, 4.00.950]
     ) M+ a+ M0 B! s- R. K* [; y% J- l
303.     [C:\WINDOWS\system32\WINWB86.IME]  [Microsoft Corporation, 4.00.950]
     ( _+ w0 m+ z, p8 v( ?9 y
304.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
305. [PID: 1124 / Administrator][C:\Program Files\Tencent\QQ\TXPlatform.exe]  [Tencent, 1, 0, 170, 0]
     
306.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
307.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
       _# v& t0 x6 x& K. C. V
308.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     3 \3 @' q$ C) L  _8 m5 G
309.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     0 v9 |7 t# y% t5 E6 R
310. [PID: 928 / Administrator][F:\arvmon.exe]  [任软工作室, 2.2.5.201]
     
311.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     - G2 u* K, B" H3 h; ?
312.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
313.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     : |* Z6 v1 b7 _" c$ |7 [3 i
314.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
315.     [F:\Vdata.dll]  [任软工作室, 2, 2, 1, 94]
     
316. [PID: 2540 / Administrator][F:\AutoGuarder.exe]  [任软工作室, 2.2.5.201]
     - o# @. l7 i9 `1 ~8 J# @
317.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     5 b+ |% L* a! m6 X; n/ q7 F
318.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     * H8 x! k. q2 f9 P" ~7 C
319.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     / j4 A# V# z! e5 d$ I0 O
320.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     % t, l6 E3 b. e7 S, [$ l$ B
321. [PID: 2476 / Administrator][d:\我的文档\桌面\系统检测修复\SREngPS.EXE]  [Smallfrogs Studio, 2.5.16.900]
     
322.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
323.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     6 m: p0 d% `+ E+ I, u8 ?
324.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     ; ~1 e4 ?( C0 ?' @  j; _
325.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
326.     [d:\我的文档\桌面\系统检测修复\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]
     
327. ==================================
     ' I/ w. N# V6 ~, l
328. 文件关联
     ( T5 O8 t1 ~/ C" s' m: n) p7 s
329. .TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
     " R5 p7 p7 @1 S/ b3 J; a
330. .EXE  OK. ["%1" %*]
     : d: u) h4 b8 C$ M( h- j( g
331. .COM  OK. ["%1" %*]
     
332. .PIF  OK. ["%1" %*]
     1 O- l+ K$ S. `! U* b3 B2 |
333. .REG  OK. [regedit.exe "%1"]
     
334. .BAT  OK. ["%1" %*]
     
335. .SCR  OK. ["%1" /S]
     
336. .CHM  OK. ["C:\WINDOWS\hh.exe" %1]
       _( q, `; b1 e8 k  W* C' `
337. .HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
     # s) e. g9 ~: z1 V7 C5 R" t
338. .INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
     ( H8 U9 F& b$ G) j
339. .INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
     
340. .VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
     4 g& a9 B; Q, }
341. .JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
     7 O# m, Y+ W/ A5 m7 V
342. .LNK  OK. [{00021401-0000-0000-C000-000000000046}]
     ; P) B: o5 H! H( h  y; F5 a% J' z
343. ==================================
     
344. Winsock 提供者
     
345. N/A
     
346. ==================================
     
347. Autorun.inf
     4 V! Q0 O! a' j' [  `0 N6 y+ d
348. N/A
       O9 W1 ^: u7 f' O! l0 ^7 }: l
349. ==================================
     
350. HOSTS 文件
     , l, E9 K+ R4 U
351. N/A
     
352. ==================================
     * G& j- g$ ^! U$ W
353. 进程特权扫描
     " I# N5 G- M% G0 K6 b
354. 特殊特权被允许： SeLoadDriverPrivilege [PID = 520, C:\WINDOWS\SYSTEM32\WINLOGON.EXE]
     
355. 特殊特权被允许： SeDebugPrivilege [PID = 928, F:\ARVMON.EXE]
     ; |8 O3 K/ I% j
356. 特殊特权被允许： SeLoadDriverPrivilege [PID = 928, F:\ARVMON.EXE]
     ' m- G6 `8 z1 t- ~5 ?8 O
357. 特殊特权被允许： SeDebugPrivilege [PID = 2540, F:\AUTOGUARDER.EXE]
     5 q( j4 V. k0 S; t) q" M
358. 特殊特权被允许： SeLoadDriverPrivilege [PID = 2540, F:\AUTOGUARDER.EXE]
     , g( C. f; c+ @6 m, O' ~
359. ==================================
     
360. API HOOK
       i/ O. C; U) f' ^
361. N/A
     
362. ==================================
     # E8 \$ H9 ]+ y, _
363. 隐藏进程
     , X+ C6 G& J, l( r0 q) L
364. N/A
     
365. ==================================
     - _: `/ p  Y& H- E
366. 
     + W! W1 S& S( y: |

复制代码

傲天♂扬帆

跟原始说了，不知道能不能看明白。。。

傲天♂元始

[Start]
6 [# Q) [7 `' K& i
: W5 a# ^$ O& T: z2008-05-22,22:24:21

6 s5 C* K1 ^9 n1 gSREngLOG智能分析专家 V1.2.0.125
Tored (http://hi.baidu.com/peaset)

' y  K8 z0 ]  _. }======================================================
; K6 O5 o6 ]- m5 O3 z以下过程将用到SREng、PowerRmv，如果您不熟悉这两款工具的使用方法，请参考下列链接：
  R! y5 {, T8 _/ s5 eSREng详细操作方法： http://hi.baidu.com/peaset/blog/ ... dd19224e4aeadf.html
0 {2 d6 G. t3 v& V( o6 W& MPowerRmv详细操作方法： http://hi.baidu.com/peaset/blog/ ... 6fb5eb77c63816.html
: O1 l  o3 G; I======================================================

/ H$ C) Y: \* o8 f+ ]以下是病毒清除步骤：

( ?, \( }) U7 ~/ k1、用PowerRmv删除以下文件(没有则跳过)：

; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
% J2 Y: k3 Z. n$ u7 }' H;
; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
1 P, \- y. P  O+ l3 g7 PC:\WINDOWS\System32\3wareSrv.exe
\SystemRoot\C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll
  t; ]1 h8 G& c
\SystemRoot\System32\DRIVERS\22jn.sys
  W% D" Q4 A! s4 D0 `\SystemRoot\System32\DRIVERS\43ecu.sys
- i, u1 |0 P0 v4 v5 n\??\C:\Documents and Settings\All Users\Application Data\Microsoft\Office\SYSTEM\ntptdb.sys
4 P. {* j6 ?6 ?. ]7 P\SystemRoot\system32\drivers\pnduojtwbt.sys
\SystemRoot\system32\drivers\RsBoot.sys
system32\DRIVERS\sr.sys
4 [% [8 P. H; X  s6 r\SystemRoot\system32\drivers\unzxzsrs.sys
\SystemRoot\system32\DRIVERS\ViBus.sys
\SystemRoot\system32\drivers\zhibmaso.sys

2、用SREng删除以下【注册表】项(没有则跳过)：
( ~3 Q* K" W8 Q. e7 }  v) L. e! ~
1 ]9 F% g! B  q  \<IMJPMIG8.1>
<PHIME2002A>
' o$ t- _# I1 x  K) R! e<PHIME2002ASync>
% x3 p* H/ O  |5 B
! t+ o' n6 o  R1 f3、用SREng删除【所有启动文件夹】内容(没有则跳过)

0 E/ i, t/ M0 }% t7 @1 v4 v* K5 d4、用SREng删除以下【服务】项(没有则跳过)：

[3ware Controller Service / 3wareSrv]
" W6 A( [; o% ]9 @. n[NetMeeting Remote Desktop Sharing / mnmsrvc]
7 Y! @3 j/ \% V: c0 ?
" N' _( ?. A; @2 C/ h1 V$ Y/ P  O5、用SREng删除以下【驱动程序】项(没有则跳过)：

  \7 K6 J5 R% m# ^[22j / 22jn]
[43ec / 43ecu]
[ntptdb / ntptdb]
1 f8 W" }9 K  p[pnduojtwbt / pnduojtwbt]
4 M7 {" H8 z: j[RsAntiSpyware / RsAntiSpyware]
# i, v3 [% {+ Y4 {[System Restore Filter Driver / sr]
[System Services / unzxzsrs]
5 f9 K0 ~  J/ Q+ T) n5 U2 v6 ?, p[ViBus / ViBus]
7 Z8 t- I  ^1 J* v3 A* @[ATI Extend / zhibmaso]

8 x" U& N9 [6 ~* f+ n. @3 a6、用SREng删除以下【浏览器加载项】项(没有则跳过)：

8 q" t9 t! F4 X* B6 `[Zcom 杂志]
[Browser Enhanced Objects]

5 a  g& n7 K3 k4 y最后,重新启动计算机.Tored祝您好运!
======================================================
[End]

傲天♂元始

你就这样弄，不行我也没办法

傲天♂扬帆

独恋有按原始说的重新操作一次吗？

独恋伊影

找不到要删的文件。。。。

傲天♂元始

有些都是隐藏起来的

傲天♂风云

" [2 Q! [+ R8 i3 A9 @2 \  l我对代码 一点都不懂

傲天♂元始

。。。这不是代码只是系统的扫描日志而已

傲天♂冷漠

我汗~~~
这么多代码~~~