在这里

独恋伊影

1. 
   
2. 2008-05-22,20:37:43
   8 z% A; A0 E7 V
3. System Repair Engineer 2.5.16.900
   ' M0 O0 f0 ?6 K/ ]# D! J
4. Smallfrogs (http://www.KZTechs.com)
   & Y! Z( T6 [  R
5. Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能
   
6. 以下内容被选中：
   6 H0 H2 O# A) ?- g9 g& j
7.     所有的启动项目（包括注册表、启动文件夹、服务等）
   
8.     浏览器加载项
   
9.     正在运行的进程（包括进程模块信息）
   
10.     文件关联
    
11.     Winsock 提供者
    2 w9 d# y3 u% f! o7 f
12.     Autorun.inf
    
13.     HOSTS 文件
    
14.     进程特权扫描
    
15. 
    $ H$ A# _4 _5 @/ T
16. 启动项目
    , m; ^2 w8 K/ D4 D6 g  Q' x4 R6 X' D; a
17. 注册表
    
18. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    ( b; }# B7 s1 |* [; Y
19.     <ctfmon.exe><C:\WINDOWS\system32\CTFMON.EXE>  [(Verified)Microsoft Windows Publisher]
    4 Y) {% }& C3 t& ~% G. i
20. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    
21.     <360Safebox><"C:\Program Files\360Safebox\safeboxTray.exe" /r>  [(Verified)Qizhi Software (beijing) Co. Ltd]
    8 I5 k" S. w1 d/ t0 }$ T6 X% W
22.     <360Safetray><C:\Program Files\360safe\safemon\360tray.exe /start>  [(Verified)Qizhi Software (beijing) Co. Ltd]
    ) T( i7 i9 _) x' w5 ?: f
23.     <360Antiarp><C:\Program Files\360safe\AntiArp\AntiArp.exe /start>  [(Verified)Qizhi Software (beijing) Co. Ltd]
    3 S& x) d: p& _$ V: i
24.     <KavStart><"C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KAVStart.exe" -startup>  [(Verified)KINGSOFT CORPORATION]
    
25.     <IMJPMIG8.1><; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32>  [N/A]
    * r( H9 p  k- O' e# u: ~
26.     <PHIME2002A><; >  [N/A]
    
27.     <PHIME2002ASync><; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32>  [N/A]
    
28. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    ' [4 Y- b- c) p9 c! K
29.     <shell><Explorer.exe>  [(Verified)Microsoft Windows Component Publisher]
    
30.     <Userinit><C:\WINDOWS\system32\UserInit.exe,>  [(Verified)Microsoft Windows Publisher]
    1 d+ S9 L9 u( F
31.     <UIHost><logonui.exe>  [(Verified)Microsoft Windows Publisher]
      C. y- y7 }$ T) S  r+ ]
32. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    
33.     <{AC2DC2EF-5165-40A3-8CDF-41DCA1B0901A}><C:\WINDOWS\system32\shlhook.dll>  [Beijing Rising Technology Co., Ltd.]
    
34. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
    
35.     <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE>  [N/A]
    
36. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
    " s4 q9 f( e5 o+ r: `
37.     <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [N/A]
    
38. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
    3 m/ Q0 l* Y7 w: {" O
39.     <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [N/A]
    
40. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
    
41.     <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [N/A]
    
42. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
    5 ?0 J3 ?3 n- U+ ~
43.     <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Remove.PerUser.NT>  [(Verified)Microsoft Windows Publisher]
    9 R! y8 t. t( w1 c' v- g. J, ^+ m
44. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
    ! T' j- z# y3 n* `
45.     <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser>  [(Verified)Microsoft Windows Publisher]
    & |1 ]7 P* Z  P$ g  b$ z
46. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
    ! \2 z# c7 L  F9 ]8 X7 M5 ~
47.     <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp10.inf,PerUserStub>  [(Verified)Microsoft Windows Publisher]
    7 X3 W, }; `( u0 i, {1 K
48. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
    0 E- i- V4 h6 ^: H
49.     <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [N/A]
    
50. ==================================
    5 N9 \( }3 I* @5 x! \
51. 启动文件夹
    
52. N/A
    & v% \' s. Q4 y( x7 c! }% P8 @
53. ==================================
    " q: [" t1 t: \
54. 服务
    4 S& o: t# i( J% r) ^4 j
55. [3ware Controller Service / 3wareSrv][Stopped/Auto Start]
    
56.   <C:\WINDOWS\System32\3wareSrv.exe><N/A>
    ( _; T5 V; C5 D5 K( P
57. [Google Updater Service / gusvc][Stopped/Manual Start]
    # B( L, Q! R. N! O$ W: p) H
58.   <"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"><Google>
    
59. [Help and Support / helpsvc][Stopped/Disabled]
    
60.   <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll><N/A>
    * `, |8 |+ e1 V( r. q; j
61. [Human Interface Device Access / HidServ][Stopped/Boot Start]
    + Q+ \* t4 p. j- @1 m/ Y& f
62.   <\SystemRoot\C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
    3 @3 Z% v" J: h$ d$ {- k6 |) L
63. [Kingsoft Internet Security Common Service / KISSvc][Stopped/Auto Start]
    
64.   <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KISSvc.EXE><Kingsoft Corporation>
    
65. [Kingsoft Personal Firewall Service / KPfwSvc][Running/Auto Start]
    
66.   <"C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KPfwSvc.EXE"><Kingsoft Corporation>
    ! d( h+ J9 l7 P+ h1 K) g
67. [Kingsoft Antivirus KWatch Service / KWatchSvc][Running/Auto Start]
    
68.   <"C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KWatch.EXE"><Kingsoft Corporation>
    
69. [NetMeeting Remote Desktop Sharing / mnmsrvc][Stopped/Manual Start]
    ( V, ^6 {# w, b5 U! A' y3 |
70.   <><N/A>
    
71. [Qvod Terminal / Qvod Terminal][Running/Auto Start]
    ; [+ q6 K, p4 M8 a7 Q7 r' S! q+ ]4 c
72.   <C:\Program Files\QvodPlayer\QvodTerminal.exe><Shenzhen QVOD Technology Co.,Ltd>
    9 z2 s8 s1 {( L& p2 i! b4 v9 ~% z$ q
73. ==================================
    
74. 驱动程序
    
75. [22j / 22jn][Stopped/Boot Start]
    # w1 Y3 c% }5 T" s
76.   <\SystemRoot\System32\DRIVERS\22jn.sys><N/A>
    
77. [360AntiArp / 360AntiArp][Running/System Start]
    
78.   <\??\C:\WINDOWS\system32\drivers\360AntiArp.sys><360安全中心>
    7 m) l' P! ~' N" P, _  M& u9 i
79. [43ec / 43ecu][Stopped/Boot Start]
    
80.   <\SystemRoot\System32\DRIVERS\43ecu.sys><N/A>
    . E, ^0 q& v) O) o- W8 x6 F/ X. W5 Q
81. [Intel(r) 82801 Audio Driver Install Service (WDM) / ac97intc][Running/Manual Start]
    
82.   <system32\drivers\ac97intc.sys><Intel Corporation>
    
83. [Promise driver accelerator / bb-run][Running/Boot Start]
    ( _0 J+ }/ r# z* A7 J+ i) a/ K2 v% f
84.   <\SystemRoot\system32\DRIVERS\bb-run.sys><Promise Technology, Inc.>
    
85. [Promise Removable Disk Control Driver / dontgo][Running/Boot Start]
    
86.   <\SystemRoot\system32\DRIVERS\DontGo.sys><Promise Technology, Inc.>
    6 c2 T' u& `' s1 z! W
87. [KAVBase / KAVBase][Running/Auto Start]
    7 x' D% q7 F2 C1 i5 ]
88.   <\??\C:\WINDOWS\system32\Drivers\KAVBase.sys><Kingsoft Corporation>
    4 g+ ^# b/ L3 R1 @
89. [KAVBootC / KAVBootC][Running/Boot Start]
    ; k" t0 t8 H( `3 q! ?6 f
90.   <\SystemRoot\system32\Drivers\KAVBootC.sys><Kingsoft Corporation>
    : ?: y$ F8 R- C% \
91. [KAVSafe / KAVSafe][Running/Auto Start]
    ' e6 ^9 o% Z0 L) g
92.   <\??\C:\WINDOWS\system32\Drivers\KAVSafe.sys><Kingsoft Corporation>
    
93. [KNetWch / KNetWch][Running/System Start]
      Q) q3 S8 H5 f/ z3 h  t8 i
94.   <\??\C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KNetWch.SYS><Kingsoft Corporation>
    " q0 y) z% X2 c$ {1 q
95. [KWatch3 / KWatch3][Running/Auto Start]
    
96.   <\??\C:\WINDOWS\system32\drivers\KWatch3.SYS><Kingsoft Corporation>
    , v: `" C  \) H, L( }: ?
97. [ntptdb / ntptdb][Stopped/Auto Start]
    
98.   <\??\C:\Documents and Settings\All Users\Application Data\Microsoft\Office\SYSTEM\ntptdb.sys><N/A>
    
99. [nv / nv][Running/Manual Start]
    : j3 |+ Y+ @1 g" ?
100.   <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
     , F: \9 H0 D. g  l
101. [NVIDIA nForce RAID Driver / nvrd32][Running/Boot Start]
     
102.   <\SystemRoot\system32\DRIVERS\nvrd32.sys><NVIDIA Corporation>
     * ^. G& f4 ]! w$ U. T! V+ [
103. [DDK PACKET Protocol / Packet][Running/Manual Start]
     
104.   <system32\DRIVERS\ProtoDrv.sys><360安全中心>
     : K( L8 t" J" o5 E3 S3 H9 W
105. [pnduojtwbt / pnduojtwbt][Stopped/Boot Start]
     - ^6 \4 u4 b6 x, u, v3 M
106.   <\SystemRoot\system32\drivers\pnduojtwbt.sys><N/A>
       l& v# D; M. w
107. [Direct Parallel Link Driver / Ptilink][Running/Manual Start]
     , x: E2 E6 \8 `& }$ {9 n) R
108.   <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
     : j' O# r6 _8 o1 h3 Q
109. [RsAntiSpyware / RsAntiSpyware][Stopped/Boot Start]
     9 k7 W% [% x! j
110.   <\SystemRoot\system32\drivers\RsBoot.sys><N/A>
     6 \, X# w; ~3 ~& Z5 ^
111. [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start]
     , F9 b9 `) i5 X0 |) \/ J8 E. c& d
112.   <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
     
113. [SafeBoxKrnl / SafeBoxKrnl][Running/System Start]
     : d. F- w; T" K
114.   <\??\C:\Program Files\360Safebox\SafeBoxKrnl.sys><360安全中心>
     
115. [Secdrv / Secdrv][Stopped/Manual Start]
     
116.   <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
     + V0 O# N, \1 ~$ o9 T. `6 o
117. [SATALink External Device Filter / SiRemFil][Running/Boot Start]
     & u, [8 A. n7 O! i. E, _
118.   <\SystemRoot\system32\DRIVERS\SiRemFil.sys><Silicon Image, Inc.>
     : D" r6 h, b7 l9 z: Q/ k! B5 O
119. [System Restore Filter Driver / sr][Stopped/Disabled]
     3 D9 ]* z4 R& A5 a4 ^9 l2 Q
120.   <system32\DRIVERS\sr.sys><N/A>
       R: C; L% [" Y$ j& t9 k
121. [TesSafe / TesSafe][Stopped/Manual Start]
     
122.   <\??\C:\WINDOWS\system32\TesSafe.sys><TENCENT>
     
123. [System Services / unzxzsrs][Stopped/Boot Start]
     
124.   <\SystemRoot\system32\drivers\unzxzsrs.sys><N/A>
     ' u( {+ [& q4 S
125. [ViBus / ViBus][Stopped/Boot Start]
     
126.   <\SystemRoot\system32\DRIVERS\ViBus.sys><N/A>
     ; ?- a! e2 O8 W% P
127. [World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start]
     . j5 N4 h, p, A: |4 E
128.   <system32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>
     
129. [VIA SATA IDE Hot-plug Driver / xfilt][Running/Boot Start]
     , a; N3 J3 d0 B6 p  Q
130.   <\SystemRoot\system32\DRIVERS\xfilt.sys><VIA Technologies,Inc>
     
131. [ATI Extend / zhibmaso][Stopped/Boot Start]
     
132.   <\SystemRoot\system32\drivers\zhibmaso.sys><N/A>
     
133. [Vimicro USB PC Camera (ZC0301PL) / ZSMC301b][Running/Manual Start]
     9 M9 @4 b$ c+ l! \% J: _- V; b5 Q
134.   <System32\Drivers\usbVM31b.sys><Vimicro Corporation>
     
135. ==================================
     
136. 浏览器加载项
     
137. [Google Toolbar Helper]
     
138.   {AA58ED58-01DD-4d91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     + O3 C; D* ?5 B& U. s- l
139. [Google Toolbar Notifier BHO]
     
140.   {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll, Google Inc.>
       b& ~6 C! d# G
141. [SafeMon Class]
     
142.   {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, 360.CN>
     
143. [kingsoft browser shield]
     9 c! I, y9 _: N; \" V, _
144.   {D963BE1A-6B35-47DB-B002-49FAE71D85CC} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KASBrowserShield.DLL, Kingsoft Corporation>
     
145. [IEBuddyExtControl Class]
     7 I0 i( ?* q, K! b1 m0 |
146.   {3AECD3C1-7085-4731-96DC-47B6CF7EF749} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddyExt.DLL, Kingsoft Corporation>
     0 a# z# L- w0 k; Z& ^& o
147. [Zcom 杂志]
     
148.   {4045D313-1D5E-4fe4-93A0-A34630B6A00B} <C:\Zcom\E-Space.exe, N/A>
     $ p: n# i+ }8 `5 ^5 D& b
149. [&Google]
     , k# n; ~$ Q5 [: z  }7 G
150.   {2318C2B1-4965-11d4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     
151. [KooPlayer Control]
     
152.   {C728DAB8-FDF5-4CD7-89DD-879D25794C77} <C:\WINDOWS\system32\CCTVKO~1.OCX, Koos>
     % N8 d! n) ~! \6 l& U4 Y
153. [Shockwave Flash Object]
     
154.   {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx, Adobe Systems, Inc.>
     
155. [KUpdateObj2 Class]
     0 N2 s/ X' @- f* ]$ O3 ~& d
156.   {D82303B7-A754-4DCB-8AFC-8CF99435AACE} <C:\WINDOWS\system32\KingSoft\KOS\UpdateOcx2.dll, Kingsoft Corporation>
     - B: N9 o  |- W; z5 G4 ]! {
157. [Google Script Object]
     % \# M! M$ T% X. z% T6 `6 ^
158.   {00EF2092-6AC5-47C0-BD25-CF2D5D657FEB} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     
159. [EWA Control]
     
160.   {18226BF8-DC0B-4D81-80E9-A41AE37BB73A} <C:\PROGRA~1\PPLive\SYNACA~2.OCX, Synacast>
     8 n" f" Y* Z* ^0 B, [+ x
161. [Windows Media Player]
     ( s' z! G8 P" m$ B/ w
162.   {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\msdxm.ocx, Microsoft Corporation>
     , q% ~3 r  w4 r9 v
163. [&Google]
     # N: Z" n$ S; z4 [$ [
164.   {2318C2B1-4965-11D4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     ; N4 J5 [: U( y1 j* x7 u* k
165. [HTML Document]
     ' s$ O1 ^- j% k4 Z$ Q  h
166.   {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
     5 J( r1 s( E( {$ q3 h8 a8 D
167. [DHTML Edit Control Safe for Scripting for IE5]
     & x5 \$ n3 Q' X
168.   {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, Microsoft Corporation>
     : P4 }3 u' P, `6 @
169. [RealPlayer RAM Download Handler]
     
170.   {2F542A2E-EDC9-4BF7-8CB1-87C9919F7F93} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
     
171. [IEBuddyExtControl Class]
     
172.   {3AECD3C1-7085-4731-96DC-47B6CF7EF749} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddyExt.DLL, Kingsoft Corporation>
     2 M& \7 R% M3 g, C" ^  K
173. [XML Document]
     
174.   {48123BC4-99D9-11D1-A6B3-00C04FD91555} <C:\WINDOWS\system32\msxml3.dll, Microsoft Corporation>
     ' I5 @3 L' t+ ~! C; j
175. [HHCtrl Object]
     
176.   {52A2AAAE-085D-4187-97EA-8C30DB990436} <C:\WINDOWS\system32\hhctrl.ocx, Microsoft Corporation>
     
177. [Windows Media Player]
     $ s2 q* A/ l$ f. G. V2 o
178.   {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     
179. [Active Desktop Mover]
     , C0 g6 B. W: d  A
180.   {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A>
     
181. [360SafeLive]
     / w, y8 e, l+ z, a+ d4 p4 e' f
182.   {87515F61-A66C-4319-A0E0-D416CB8059E3} <C:\Program Files\360safe\live.dll, 360.cn>
     
183. [Microsoft Web 浏览器]
     - _. V( v% c: u
184.   {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
     ; o- y: J, w4 V  s  T
185. [Browser Enhanced Objects]
     
186.   {986488AF-13D5-9DDF-4FEF-9FB88698CFC1} <C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\USERDATA\webbrowser_2011.dll, N/A>
     . l- y" ^3 v5 E6 m% o* p
187. [Google Toolbar Helper]
     
188.   {AA58ED58-01DD-4D91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     5 t) {" ^4 C8 Q: n9 c9 m& T
189. [Microsoft Scriptlet Component]
     2 F) e7 D+ U* ]5 X3 [, A- W
190.   {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation>
     
191. [Google Toolbar Notifier BHO]
     " v" _/ Z% h0 k! R+ o$ q% x
192.   {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll, Google Inc.>
     ! f" r$ U  [# V* d, R2 w) G
193. [SearchAssistantOC]
     # b8 S/ N# x* x1 |6 L2 b$ L  ?2 V
194.   {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
     : H4 K1 o% j+ E8 ?4 ~" A6 p7 W
195. [SafeMon Class]
     
196.   {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, 360.CN>
     
197. [RDS.DataSpace]
     
198.   {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
     3 ~* _( F+ o' S/ I
199. [KooPlayer Control]
     ! i5 ^2 i% H$ D& W5 l% d
200.   {C728DAB8-FDF5-4CD7-89DD-879D25794C77} <C:\WINDOWS\system32\CCTVKO~1.OCX, Koos>
     + z4 h; a9 k4 ^6 r0 v7 \8 Q
201. [AUDIO__MID Moniker Class]
     + r# O; z& ?; O( p3 S" F
202.   {CD3AFA74-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     , z# N: D8 k+ X
203. [AUDIO__MP3 Moniker Class]
     # o: |- m- f& w4 w4 L# w
204.   {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     2 G' x, `( X4 e# X+ T* L
205. [AUDIO__X_MS_WMA Moniker Class]
     
206.   {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     % [  n( y$ i! }: o  }. l$ v5 c
207. [VIDEO__X_MS_WMV Moniker Class]
     
208.   {CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     4 p7 _$ S- W4 n3 G) {' o
209. [RealPlayer G2 Control]
     
210.   {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
     
211. [Shockwave Flash Object]
       \4 ~/ y. G$ ~2 T, r
212.   {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx, Adobe Systems, Inc.>
     
213. [KUpdateObj2 Class]
       o% L) N+ r* f2 q2 C! k: T% p
214.   {D82303B7-A754-4DCB-8AFC-8CF99435AACE} <C:\WINDOWS\system32\KingSoft\KOS\UpdateOcx2.dll, Kingsoft Corporation>
     " {! P' i. B' @" k7 t; e
215. [kingsoft browser shield]
     
216.   {D963BE1A-6B35-47DB-B002-49FAE71D85CC} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KASBrowserShield.DLL, Kingsoft Corporation>
     9 V3 i7 i0 ]! h! j' ~# m
217. [PasswordEditCtrl Class]
     0 f6 Q' [; {' l2 B( U7 @3 x8 L4 n& e
218.   {E787FD25-8D7C-4693-AE67-9406BC6E22DF} <C:\WINDOWS\system32\qqedit\qqedit.dll, 腾讯科技（深圳）有限公司>
     & e! W4 `! E" S7 I/ }$ n# V
219. [QvodCtrl Class]
     
220.   {F3D0D36F-23F8-4682-A195-74C92B03D4AF} <C:\Program Files\QvodPlayer\QvodInsert.dll, Shenzhen QVOD Technology Co.,Ltd>
     / x9 |0 K8 I3 b8 Z) Z' M( g
221. [&使用超级旋风下载]
       D% Z5 x9 e9 P3 D$ M! |
222.   <C:\Program Files\Tencent\QQDownload\geturl.htm, N/A>
     
223. [&使用超级旋风下载全部链接]
       t) g4 }* x& g7 `" B3 R! f& f* Q
224.   <C:\Program Files\Tencent\QQDownload\getAllurl.htm, N/A>
     8 k9 B, b. U# r
225. [使用迅雷下载]
     ( X" N3 e' I" H7 t: [5 L! K
226.   <, N/A>
     0 F  H; @2 A) z0 d3 T+ `
227. [使用迅雷下载全部链接]
     ( A% t# h! |' `/ d
228.   <, N/A>
     
229. [导出到 Microsoft Office Excel(&X)]
     + i- H5 `; l4 p( Y+ m( {
230.   <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
     
231. [添加到QQ表情]
     
232.   <C:\Program Files\Tencent\QQ\AddEmotion.htm, N/A>
     1 w$ s0 M7 X% [( T: T8 W
233. ==================================
       B( i, C6 @6 M. M# i7 `/ }
234. 正在运行的进程
     
235. [PID: 444 / SYSTEM][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     1 Q8 r( A  Q3 B- E9 t. q. V
236. [PID: 496 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     8 S& u# M: f  x
237. [PID: 520 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
238.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
     
239. [PID: 564 / SYSTEM][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
240. [PID: 576 / SYSTEM][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
241. [PID: 720 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
242. [PID: 780 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
243. [PID: 856 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
244. [PID: 944 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
245. [PID: 1012 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     / w% S1 t* F6 I
246. [PID: 1236 / Administrator][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_qfe.070613-1311)]
     ) p7 _8 K: |$ ~! v
247.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
248.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
249.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
     
250.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     . e# h9 m, P- P$ U6 ?" G9 e4 k
251.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KAVEXT.DLL]  [Kingsoft Corporation, 2008,05,07,373]
     
252.     [C:\Program Files\Tencent\QQ\qdshm.dll]  [, 1, 0, 101, 20]
     
253.     [C:\Program Files\Tencent\QQ\MFC42.DLL]  [Microsoft Corporation, 6.00.8665.0]
     2 E8 n0 M1 j1 d7 T+ U% P
254.     [C:\Program Files\WinRAR\rarext.dll]  [N/A, ]
     4 u+ [8 [7 C4 W& w
255.     [C:\WINDOWS\system32\shlhook.dll]  [Beijing Rising Technology Co., Ltd., 4.0.0.9]
     & H6 h5 k2 ~7 g7 Q; F: L* }
256.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     ) J+ d5 W: A0 _" N) M
257.     [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
     
258. [PID: 1332 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
     0 j! E: u0 q6 s% E2 h
259.     [C:\WINDOWS\system32\mdimon.dll]  [Microsoft Corporation, 11.3.8166.2]
     $ K+ N5 G/ s7 _9 ^9 f5 s
260.     [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll]  [Microsoft Corporation, 11.3.8166.2]
     
261. [PID: 1540 / Administrator][C:\Program Files\360safe\AntiArp\AntiArp.exe]  [360安全中心, 2, 0, 0, 1008]
     
262.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
263.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
264.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
265.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     3 W' x$ {: ^- |
266. [PID: 1560 / Administrator][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
267.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
268.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
       T+ s# a/ ]+ ~% n5 a6 D# ?" D; W- Q
269.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     : z4 x# v3 z4 ^2 C$ Z$ ?
270. [PID: 1576 / Administrator][C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe]  [Google Inc., 2, 0, 301, 1654]
     
271.     [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\gtn.dll]  [Google Inc., 2, 0, 301, 7164]
     6 s, v) {* \8 N+ w3 p
272.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     8 A3 q4 `1 x1 Y
273.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
274.     [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\res_zh-CN.dll]  [Google Inc., 2, 0, 301, 7164]
     + Z4 B, T& y. R$ v$ S
275.     [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll]  [Google Inc., 2, 0, 301, 7164]
     2 R- U" b5 g' z2 m( {  l# \
276.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
277.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
278. [PID: 1648 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     ; m6 A% R, e, K! s8 |
279. [PID: 1744 / SYSTEM][C:\Program Files\QvodPlayer\QvodTerminal.exe]  [Shenzhen QVOD Technology Co.,Ltd, 2, 5, 0, 53]
     4 L6 @3 Z/ ~3 L- g
280. [PID: 1860 / SYSTEM][C:\WINDOWS\system32\skeys.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     " U' I( ?0 J- H" Y: J& P: Q" \
281. [PID: 1908 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     $ ^1 @' |5 A9 c( f& }1 b
282. [PID: 1964 / LOCAL SERVICE][C:\WINDOWS\system32\wdfmgr.exe]  [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
     
283. [PID: 2772 / Administrator][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
     
284.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     ; Y, f0 ]+ A6 Q: E6 D# N. x+ ]& F
285.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     4 _+ t. a4 }/ |4 h7 k: K5 L
286.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
287.     [c:\program files\google\googletoolbar2.dll]  [Google Inc., 4, 0, 1606, 6690]
     
288.     [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll]  [Google Inc., 2, 0, 301, 7164]
     
289.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KASBrowserShield.DLL]  [Kingsoft Corporation, 2008,04,15,2]
     
290.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddy.dll]  [Kingsoft Corporation, 2008,04,15,2]
     7 S" }  ^: j# g! t
291.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddyExt.DLL]  [Kingsoft Corporation, 2008,05,14,83]
       c0 O/ V& R" Y% y0 P) H
292.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KANTray.dll]  [Kingsoft Corporation, 2008,04,15,2]
     ' V! }; V6 u; L: e$ n
293.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KAVAFish.DLL]  [Kingsoft Corporation, 2008,05,13,78]
     ) r' Z+ h3 F2 |
294.     [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
     
295.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
     
296.     [C:\WINDOWS\system32\WN.IME]  [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
     
297.     [C:\Program Files\ShiQiang\wnime\Dll32\wnpy_StatusWnd.dll]  [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
     9 K: @$ w" B, ]5 ?' Q
298.     [C:\Program Files\ShiQiang\wnime\Dll32\wnpy_CompWnd.dll]  [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
     
299.     [C:\Program Files\ShiQiang\wnime\Dll32\wnpy_Query.dll]  [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
     " M* k  [) E5 p+ `, `' b# r2 j* p
300.     [C:\WINDOWS\system32\SOGOUPY.IME]  [Sogou.com Inc., 3.2.0.0]
     . _' A* T; _; g0 o+ r, U
301.     [C:\Documents and Settings\Administrator\My Documents\SogouInput\Plugin\SgImeWord.dll]  [Sogou.com Inc., 3.2.0.0]
     
302.     [C:\WINDOWS\system32\WINWB98.IME]  [Microsoft Corporation, 4.00.950]
     
303.     [C:\WINDOWS\system32\WINWB86.IME]  [Microsoft Corporation, 4.00.950]
     $ f% _# o; I' V8 k$ u* c1 V* D2 q
304.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     + L( }" A; O! h8 W" j! [- B
305. [PID: 1124 / Administrator][C:\Program Files\Tencent\QQ\TXPlatform.exe]  [Tencent, 1, 0, 170, 0]
     7 p8 a' K* j$ p- ^  r9 H. g
306.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
307.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     * G! x) [( H; \: }; i+ d- b4 g! I
308.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     4 a. E! E- v2 u
309.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     6 Y1 F: V" K* u; E" L* E
310. [PID: 928 / Administrator][F:\arvmon.exe]  [任软工作室, 2.2.5.201]
     
311.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
312.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
313.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     7 n5 E" H' u- K/ V% \6 @) B3 m8 S) L; z
314.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
315.     [F:\Vdata.dll]  [任软工作室, 2, 2, 1, 94]
     + Y8 D& q: f) q: K9 Y, z$ Z5 G
316. [PID: 2540 / Administrator][F:\AutoGuarder.exe]  [任软工作室, 2.2.5.201]
     
317.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
318.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     / U  Q; W! I% F8 G, V) {
319.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
320.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     3 [& r8 Y5 V4 O- _4 ?- r, o
321. [PID: 2476 / Administrator][d:\我的文档\桌面\系统检测修复\SREngPS.EXE]  [Smallfrogs Studio, 2.5.16.900]
     + s  F' C5 e" Y6 g
322.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
323.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     4 x2 \8 i+ {8 R/ w+ ?( c+ m
324.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     6 W* D* O- W" E5 v, U& j
325.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
326.     [d:\我的文档\桌面\系统检测修复\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]
     
327. ==================================
     ' M) ^$ Y# y" `6 a
328. 文件关联
     
329. .TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
     
330. .EXE  OK. ["%1" %*]
     ! f. p5 m' [  A3 [
331. .COM  OK. ["%1" %*]
     
332. .PIF  OK. ["%1" %*]
     
333. .REG  OK. [regedit.exe "%1"]
     + _- Z1 \' U- H. {  ^5 T+ f
334. .BAT  OK. ["%1" %*]
     ) A, d; B) @9 A: f7 K6 ]5 B6 l
335. .SCR  OK. ["%1" /S]
     
336. .CHM  OK. ["C:\WINDOWS\hh.exe" %1]
     
337. .HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
     
338. .INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
     ) c( r" |% ~- n6 p6 [+ i. j- O2 V7 y
339. .INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
     + m1 B0 M% ~# D+ Q
340. .VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
     
341. .JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
     ! U5 u# b2 m& n9 N  O
342. .LNK  OK. [{00021401-0000-0000-C000-000000000046}]
     3 U5 I6 J) S& g
343. ==================================
     3 A/ c+ ^, N7 m. I
344. Winsock 提供者
     
345. N/A
     
346. ==================================
     
347. Autorun.inf
     ' X2 Z1 P+ V! V2 e
348. N/A
     0 W/ ]0 `( X9 A* O  C+ D
349. ==================================
     
350. HOSTS 文件
     
351. N/A
     8 o: x6 {+ O! u5 i/ i; u" m6 c
352. ==================================
     , g) Z5 Y/ k2 Y9 k. k
353. 进程特权扫描
     1 Z6 a( Y( J+ g7 ~7 n) ~
354. 特殊特权被允许： SeLoadDriverPrivilege [PID = 520, C:\WINDOWS\SYSTEM32\WINLOGON.EXE]
     
355. 特殊特权被允许： SeDebugPrivilege [PID = 928, F:\ARVMON.EXE]
     
356. 特殊特权被允许： SeLoadDriverPrivilege [PID = 928, F:\ARVMON.EXE]
     ! X, e2 ?9 r* w4 v1 ]$ }
357. 特殊特权被允许： SeDebugPrivilege [PID = 2540, F:\AUTOGUARDER.EXE]
     
358. 特殊特权被允许： SeLoadDriverPrivilege [PID = 2540, F:\AUTOGUARDER.EXE]
       s. t1 J7 H; Z' d
359. ==================================
     
360. API HOOK
     - s5 f+ h5 O0 P; T6 @- `: c
361. N/A
     
362. ==================================
     
363. 隐藏进程
     ; ~; Z- w: f4 r
364. N/A
     
365. ==================================
     # q) i4 |1 b2 {
366. 
     ( o$ m' o4 A* P5 g

复制代码

傲天♂扬帆

跟原始说了，不知道能不能看明白。。。

傲天♂元始

[Start]

2008-05-22,22:24:21

SREngLOG智能分析专家 V1.2.0.125
# G; B; d  R% W" Q  l3 X8 [# X  iTored (http://hi.baidu.com/peaset)

9 _2 z  E' E* i======================================================
以下过程将用到SREng、PowerRmv，如果您不熟悉这两款工具的使用方法，请参考下列链接：
$ W) S  w# p8 e5 `6 _SREng详细操作方法： http://hi.baidu.com/peaset/blog/ ... dd19224e4aeadf.html
% m0 j5 P0 {+ h" f% LPowerRmv详细操作方法： http://hi.baidu.com/peaset/blog/ ... 6fb5eb77c63816.html
! i  P. Q8 }: }- N% U======================================================

' N5 @* I& {; W/ l+ e2 L. @以下是病毒清除步骤：
' K7 h5 ?6 }6 I/ Q0 f; h9 `
3 E5 o$ n) E& @  ]1、用PowerRmv删除以下文件(没有则跳过)：
2 t. R8 [. k* x9 J' o3 o& Q
; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
;
$ E5 w/ D7 ]6 i! k; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
4 h0 c0 o+ l! E2 ^# b, {C:\WINDOWS\System32\3wareSrv.exe
9 X* b0 p+ r7 A* J2 Q+ @& m\SystemRoot\C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll
  @; O( [0 _; b# w
\SystemRoot\System32\DRIVERS\22jn.sys
" k8 X  {5 ~% M\SystemRoot\System32\DRIVERS\43ecu.sys
% `8 Q6 N( B6 s# e( ~\??\C:\Documents and Settings\All Users\Application Data\Microsoft\Office\SYSTEM\ntptdb.sys
6 L% d+ V5 a/ X( l8 c( z% Z5 I$ y8 }\SystemRoot\system32\drivers\pnduojtwbt.sys
6 W9 C+ q1 \: |9 Q\SystemRoot\system32\drivers\RsBoot.sys
& w0 x5 C( H5 J+ ^) Osystem32\DRIVERS\sr.sys
\SystemRoot\system32\drivers\unzxzsrs.sys
\SystemRoot\system32\DRIVERS\ViBus.sys
9 n0 p; }0 b2 `0 z3 i& w/ k! T\SystemRoot\system32\drivers\zhibmaso.sys

8 \: Y+ k6 u. B8 F' ~" z7 N2、用SREng删除以下【注册表】项(没有则跳过)：

<IMJPMIG8.1>
# K7 ?9 d& z( i9 ~4 |3 i, [, m<PHIME2002A>
$ C/ D# V8 C$ }7 n) a3 l% r<PHIME2002ASync>
2 X1 g5 ~" R# o/ J+ V
7 `% `! ?* S" G* v, h3、用SREng删除【所有启动文件夹】内容(没有则跳过)

: W! ]. x& b0 l4 M4、用SREng删除以下【服务】项(没有则跳过)：
. _( X. u! }, f. f# M. ~5 K3 F
[3ware Controller Service / 3wareSrv]
[NetMeeting Remote Desktop Sharing / mnmsrvc]

5、用SREng删除以下【驱动程序】项(没有则跳过)：

1 H8 \& Q! F, I& h/ N[22j / 22jn]
[43ec / 43ecu]
# S* q: N& \  s8 P2 V1 L[ntptdb / ntptdb]
/ {) p1 ^# A/ `[pnduojtwbt / pnduojtwbt]
# }/ X! }4 n% J$ Y[RsAntiSpyware / RsAntiSpyware]
( j" u/ q* l- _; J4 ~% U[System Restore Filter Driver / sr]
[System Services / unzxzsrs]
[ViBus / ViBus]
[ATI Extend / zhibmaso]
) y! @8 d' O3 R" ?2 I. I* i
6、用SREng删除以下【浏览器加载项】项(没有则跳过)：

5 j, ]: q- f" J4 q* B; b; y[Zcom 杂志]
[Browser Enhanced Objects]

最后,重新启动计算机.Tored祝您好运!
5 L0 |& \. X+ T3 \# a======================================================
" e5 U- q% g+ ?+ r: b6 t[End]

傲天♂元始

你就这样弄，不行我也没办法

傲天♂扬帆

独恋有按原始说的重新操作一次吗？

独恋伊影

找不到要删的文件。。。。

傲天♂元始

有些都是隐藏起来的

傲天♂风云

. s/ O: \3 g1 M3 e& [
我对代码 一点都不懂

傲天♂元始

。。。这不是代码只是系统的扫描日志而已

傲天♂冷漠

我汗~~~
4 |0 X$ G- N) I9 n) i这么多代码~~~