在这里

独恋伊影

1. 
   ( l0 B! r% t& A, _8 o2 q5 }
2. 2008-05-22,20:37:43
   
3. System Repair Engineer 2.5.16.900
   
4. Smallfrogs (http://www.KZTechs.com)
   3 _1 q3 L( R8 t  Q/ h3 P
5. Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能
   
6. 以下内容被选中：
   
7.     所有的启动项目（包括注册表、启动文件夹、服务等）
   
8.     浏览器加载项
   
9.     正在运行的进程（包括进程模块信息）
   
10.     文件关联
    
11.     Winsock 提供者
    
12.     Autorun.inf
    
13.     HOSTS 文件
    
14.     进程特权扫描
    0 m, C6 [9 ~7 H1 O  ]( }, q  K' f1 H
15. 
    * u3 t) ]: y" n$ M+ S
16. 启动项目
    - g6 }1 R$ L* W  |$ W) e8 e  G! f
17. 注册表
    $ ?, w$ }2 D$ J9 }# X  {
18. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    
19.     <ctfmon.exe><C:\WINDOWS\system32\CTFMON.EXE>  [(Verified)Microsoft Windows Publisher]
    
20. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    * Y& N' O- H& M4 X
21.     <360Safebox><"C:\Program Files\360Safebox\safeboxTray.exe" /r>  [(Verified)Qizhi Software (beijing) Co. Ltd]
    ; c! Z  `. t  y/ ]5 G
22.     <360Safetray><C:\Program Files\360safe\safemon\360tray.exe /start>  [(Verified)Qizhi Software (beijing) Co. Ltd]
    
23.     <360Antiarp><C:\Program Files\360safe\AntiArp\AntiArp.exe /start>  [(Verified)Qizhi Software (beijing) Co. Ltd]
    
24.     <KavStart><"C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KAVStart.exe" -startup>  [(Verified)KINGSOFT CORPORATION]
    
25.     <IMJPMIG8.1><; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32>  [N/A]
    
26.     <PHIME2002A><; >  [N/A]
    
27.     <PHIME2002ASync><; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32>  [N/A]
    2 B2 r# G8 \+ K1 C5 ~
28. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    
29.     <shell><Explorer.exe>  [(Verified)Microsoft Windows Component Publisher]
    - _" c9 P4 K6 f. @
30.     <Userinit><C:\WINDOWS\system32\UserInit.exe,>  [(Verified)Microsoft Windows Publisher]
    , t& _- R) L9 @6 v" f# v1 `
31.     <UIHost><logonui.exe>  [(Verified)Microsoft Windows Publisher]
    & ^+ T/ @; Q* U" c4 d6 T5 H4 y
32. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    
33.     <{AC2DC2EF-5165-40A3-8CDF-41DCA1B0901A}><C:\WINDOWS\system32\shlhook.dll>  [Beijing Rising Technology Co., Ltd.]
    
34. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
    # F" P' s* z8 o
35.     <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE>  [N/A]
    6 B5 {+ s3 A! m- `+ D6 v$ A" u
36. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
    ! r8 _, s7 j- [& I& Q
37.     <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [N/A]
    ; S- N. M% V) S' l
38. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
    ; h# o8 ^/ L' L1 b
39.     <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [N/A]
    2 {( B7 }: A# J% H0 Q. c8 {
40. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
    4 a& w. B3 R3 s& b( i
41.     <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [N/A]
    / U, U& \5 O1 v8 f
42. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
    
43.     <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Remove.PerUser.NT>  [(Verified)Microsoft Windows Publisher]
    
44. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
    
45.     <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser>  [(Verified)Microsoft Windows Publisher]
    
46. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
    + }3 ?9 e. R) j8 e3 r
47.     <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp10.inf,PerUserStub>  [(Verified)Microsoft Windows Publisher]
    9 Q* R, y1 B, ~/ t
48. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
    " K6 F& ]% A/ }4 k$ N
49.     <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [N/A]
    
50. ==================================
    # @' m6 J& f: r1 S3 g1 D
51. 启动文件夹
    8 K$ w/ W% x: ]1 Q  \8 X5 y$ k8 m
52. N/A
    % l" B& X6 z. _  h! j5 s3 e& G; J7 F
53. ==================================
    % k! g3 J# j+ _! C* q+ b
54. 服务
    7 h- R- e6 j1 j( D, Z5 q5 @6 R. I" c
55. [3ware Controller Service / 3wareSrv][Stopped/Auto Start]
    
56.   <C:\WINDOWS\System32\3wareSrv.exe><N/A>
    
57. [Google Updater Service / gusvc][Stopped/Manual Start]
    , T2 S) y5 M' |8 L# [
58.   <"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"><Google>
    % X$ Y" R- N+ j7 M
59. [Help and Support / helpsvc][Stopped/Disabled]
    
60.   <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll><N/A>
    
61. [Human Interface Device Access / HidServ][Stopped/Boot Start]
    
62.   <\SystemRoot\C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
    
63. [Kingsoft Internet Security Common Service / KISSvc][Stopped/Auto Start]
    
64.   <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KISSvc.EXE><Kingsoft Corporation>
    6 g7 P6 H# N+ K' s, V4 J
65. [Kingsoft Personal Firewall Service / KPfwSvc][Running/Auto Start]
    2 E" |0 @$ c$ d& G! Z% a# |, R
66.   <"C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KPfwSvc.EXE"><Kingsoft Corporation>
    # c8 p# R# M3 l, H4 P% N
67. [Kingsoft Antivirus KWatch Service / KWatchSvc][Running/Auto Start]
      d0 M5 W2 ^& ~3 h7 f" S/ h4 o
68.   <"C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KWatch.EXE"><Kingsoft Corporation>
    
69. [NetMeeting Remote Desktop Sharing / mnmsrvc][Stopped/Manual Start]
    6 B3 c, ^' o, t7 S8 ]
70.   <><N/A>
    + L  F, A" N* K7 F; I
71. [Qvod Terminal / Qvod Terminal][Running/Auto Start]
    
72.   <C:\Program Files\QvodPlayer\QvodTerminal.exe><Shenzhen QVOD Technology Co.,Ltd>
    2 P5 e! u3 Z% I
73. ==================================
    : V  ]6 k8 v' F1 D9 h' x0 ~
74. 驱动程序
    3 f; a& @# N5 k1 m8 I6 R
75. [22j / 22jn][Stopped/Boot Start]
    1 W  u" K. u! l, J; ^
76.   <\SystemRoot\System32\DRIVERS\22jn.sys><N/A>
    
77. [360AntiArp / 360AntiArp][Running/System Start]
    
78.   <\??\C:\WINDOWS\system32\drivers\360AntiArp.sys><360安全中心>
    
79. [43ec / 43ecu][Stopped/Boot Start]
    % `- c5 A  p" O
80.   <\SystemRoot\System32\DRIVERS\43ecu.sys><N/A>
    " u. x2 e( F- c. V/ c9 b
81. [Intel(r) 82801 Audio Driver Install Service (WDM) / ac97intc][Running/Manual Start]
    - K' O+ V, i; I3 U4 E0 a
82.   <system32\drivers\ac97intc.sys><Intel Corporation>
    6 e7 i+ l+ f8 E& g1 v
83. [Promise driver accelerator / bb-run][Running/Boot Start]
    
84.   <\SystemRoot\system32\DRIVERS\bb-run.sys><Promise Technology, Inc.>
    4 f4 E4 ]* [7 N5 x* `2 j3 [
85. [Promise Removable Disk Control Driver / dontgo][Running/Boot Start]
    
86.   <\SystemRoot\system32\DRIVERS\DontGo.sys><Promise Technology, Inc.>
    
87. [KAVBase / KAVBase][Running/Auto Start]
    6 l" {9 \. C# |- m! ~/ h
88.   <\??\C:\WINDOWS\system32\Drivers\KAVBase.sys><Kingsoft Corporation>
      G# Z: H- j( q- W$ M9 R! \5 [
89. [KAVBootC / KAVBootC][Running/Boot Start]
    % a! u* y5 I/ b
90.   <\SystemRoot\system32\Drivers\KAVBootC.sys><Kingsoft Corporation>
    2 i% B+ N& ~4 y$ C% w5 Q1 K- D; P% M
91. [KAVSafe / KAVSafe][Running/Auto Start]
    
92.   <\??\C:\WINDOWS\system32\Drivers\KAVSafe.sys><Kingsoft Corporation>
    
93. [KNetWch / KNetWch][Running/System Start]
    
94.   <\??\C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KNetWch.SYS><Kingsoft Corporation>
    
95. [KWatch3 / KWatch3][Running/Auto Start]
    
96.   <\??\C:\WINDOWS\system32\drivers\KWatch3.SYS><Kingsoft Corporation>
    7 A. X0 h8 ]3 V5 P* y
97. [ntptdb / ntptdb][Stopped/Auto Start]
    ' Q4 J" K7 M% x- i; F
98.   <\??\C:\Documents and Settings\All Users\Application Data\Microsoft\Office\SYSTEM\ntptdb.sys><N/A>
    8 F& m# A/ r% ], F% d3 w; @2 q
99. [nv / nv][Running/Manual Start]
    - A) h+ q$ ^) h
100.   <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
     + W; Q  K4 k' l8 A" Z: E
101. [NVIDIA nForce RAID Driver / nvrd32][Running/Boot Start]
     
102.   <\SystemRoot\system32\DRIVERS\nvrd32.sys><NVIDIA Corporation>
     $ W+ G3 }) q' S5 G- z7 ?" W( f# s
103. [DDK PACKET Protocol / Packet][Running/Manual Start]
     ! s2 M. n. I: K2 d8 s! G% ~1 B2 c9 t
104.   <system32\DRIVERS\ProtoDrv.sys><360安全中心>
     
105. [pnduojtwbt / pnduojtwbt][Stopped/Boot Start]
     
106.   <\SystemRoot\system32\drivers\pnduojtwbt.sys><N/A>
     
107. [Direct Parallel Link Driver / Ptilink][Running/Manual Start]
     8 _9 v+ O) I7 q" j1 W8 o
108.   <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
     4 ~. V) W4 P" N$ b' N4 z9 R
109. [RsAntiSpyware / RsAntiSpyware][Stopped/Boot Start]
     , t. r" {% Q& [1 T% {* _9 ~+ j
110.   <\SystemRoot\system32\drivers\RsBoot.sys><N/A>
     " S1 J, Z2 |/ q4 V* d
111. [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start]
     
112.   <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
     - M+ s0 a4 b( t) J
113. [SafeBoxKrnl / SafeBoxKrnl][Running/System Start]
     4 E/ U  {9 G$ b. ?( k
114.   <\??\C:\Program Files\360Safebox\SafeBoxKrnl.sys><360安全中心>
     
115. [Secdrv / Secdrv][Stopped/Manual Start]
     
116.   <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
     " Q7 P/ D% `3 k; s
117. [SATALink External Device Filter / SiRemFil][Running/Boot Start]
     
118.   <\SystemRoot\system32\DRIVERS\SiRemFil.sys><Silicon Image, Inc.>
     0 A6 m8 z8 A7 }0 D' Q. l
119. [System Restore Filter Driver / sr][Stopped/Disabled]
     
120.   <system32\DRIVERS\sr.sys><N/A>
     
121. [TesSafe / TesSafe][Stopped/Manual Start]
     * g3 m# b4 c4 _4 o% I: o  Z
122.   <\??\C:\WINDOWS\system32\TesSafe.sys><TENCENT>
     ! z' n+ P$ g4 w! p. U
123. [System Services / unzxzsrs][Stopped/Boot Start]
     ) \% M0 G9 }. |
124.   <\SystemRoot\system32\drivers\unzxzsrs.sys><N/A>
     : b' N# |( ^+ ~
125. [ViBus / ViBus][Stopped/Boot Start]
     ' P& d' e* ]5 s4 G; c
126.   <\SystemRoot\system32\DRIVERS\ViBus.sys><N/A>
     
127. [World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start]
     
128.   <system32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>
     
129. [VIA SATA IDE Hot-plug Driver / xfilt][Running/Boot Start]
     
130.   <\SystemRoot\system32\DRIVERS\xfilt.sys><VIA Technologies,Inc>
     
131. [ATI Extend / zhibmaso][Stopped/Boot Start]
     
132.   <\SystemRoot\system32\drivers\zhibmaso.sys><N/A>
     * Y1 e9 a7 p- y* U
133. [Vimicro USB PC Camera (ZC0301PL) / ZSMC301b][Running/Manual Start]
     
134.   <System32\Drivers\usbVM31b.sys><Vimicro Corporation>
     . ^4 V9 l! n, B, R
135. ==================================
     
136. 浏览器加载项
     3 n' D+ B6 z' [* Y0 x
137. [Google Toolbar Helper]
     
138.   {AA58ED58-01DD-4d91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     
139. [Google Toolbar Notifier BHO]
     ! o( U! A% H% C
140.   {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll, Google Inc.>
     0 A3 t1 {/ z& u) u0 ~9 d) ]9 X
141. [SafeMon Class]
     2 F. A; U! [9 H& m3 s" R) w
142.   {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, 360.CN>
     
143. [kingsoft browser shield]
     
144.   {D963BE1A-6B35-47DB-B002-49FAE71D85CC} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KASBrowserShield.DLL, Kingsoft Corporation>
     ) l* p: ]3 t% {  V9 M  _3 Y
145. [IEBuddyExtControl Class]
     9 l5 s) e3 w7 |- E
146.   {3AECD3C1-7085-4731-96DC-47B6CF7EF749} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddyExt.DLL, Kingsoft Corporation>
     
147. [Zcom 杂志]
     
148.   {4045D313-1D5E-4fe4-93A0-A34630B6A00B} <C:\Zcom\E-Space.exe, N/A>
     
149. [&Google]
     
150.   {2318C2B1-4965-11d4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     7 _0 i% ~. ?! u
151. [KooPlayer Control]
     
152.   {C728DAB8-FDF5-4CD7-89DD-879D25794C77} <C:\WINDOWS\system32\CCTVKO~1.OCX, Koos>
     , l6 C5 E2 W1 D- B1 q# U' _1 ~! j
153. [Shockwave Flash Object]
     % ]" ^: I& F! Y3 @1 o5 u1 V
154.   {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx, Adobe Systems, Inc.>
     
155. [KUpdateObj2 Class]
     9 N* ?6 u/ I, }$ x7 E7 k: x
156.   {D82303B7-A754-4DCB-8AFC-8CF99435AACE} <C:\WINDOWS\system32\KingSoft\KOS\UpdateOcx2.dll, Kingsoft Corporation>
     & {, |6 w9 X  u
157. [Google Script Object]
     , u2 {! `* Y3 ^# _9 a: k" Q
158.   {00EF2092-6AC5-47C0-BD25-CF2D5D657FEB} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     
159. [EWA Control]
     
160.   {18226BF8-DC0B-4D81-80E9-A41AE37BB73A} <C:\PROGRA~1\PPLive\SYNACA~2.OCX, Synacast>
     ( _# q& R7 c4 X( c( t
161. [Windows Media Player]
     
162.   {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\msdxm.ocx, Microsoft Corporation>
     : K; Q% o: b: l) Y
163. [&Google]
     
164.   {2318C2B1-4965-11D4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     
165. [HTML Document]
     ; e% T0 d' n0 Z
166.   {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
     
167. [DHTML Edit Control Safe for Scripting for IE5]
     2 l+ k6 X4 w5 r% B
168.   {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, Microsoft Corporation>
     
169. [RealPlayer RAM Download Handler]
     
170.   {2F542A2E-EDC9-4BF7-8CB1-87C9919F7F93} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
     / U+ h5 k, n5 u" B
171. [IEBuddyExtControl Class]
     1 C, w- ]4 t9 N" J
172.   {3AECD3C1-7085-4731-96DC-47B6CF7EF749} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddyExt.DLL, Kingsoft Corporation>
     
173. [XML Document]
     
174.   {48123BC4-99D9-11D1-A6B3-00C04FD91555} <C:\WINDOWS\system32\msxml3.dll, Microsoft Corporation>
     8 h0 Q. }& Q1 P% c' {8 M1 o4 `% ^
175. [HHCtrl Object]
     1 {. v! W' w2 B& W( \$ e5 e
176.   {52A2AAAE-085D-4187-97EA-8C30DB990436} <C:\WINDOWS\system32\hhctrl.ocx, Microsoft Corporation>
     3 d! F5 e" c( r. [2 C% @
177. [Windows Media Player]
     9 X; c% x5 P3 Y: f
178.   {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     
179. [Active Desktop Mover]
     
180.   {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A>
     ! d; Q9 v& K' |/ B( [  c
181. [360SafeLive]
     
182.   {87515F61-A66C-4319-A0E0-D416CB8059E3} <C:\Program Files\360safe\live.dll, 360.cn>
     
183. [Microsoft Web 浏览器]
     8 u' X, g4 d) t6 P8 u! o+ }
184.   {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
     
185. [Browser Enhanced Objects]
     
186.   {986488AF-13D5-9DDF-4FEF-9FB88698CFC1} <C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\USERDATA\webbrowser_2011.dll, N/A>
     0 ]* Y  f; X* Z9 N, o2 B
187. [Google Toolbar Helper]
     
188.   {AA58ED58-01DD-4D91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     ; N  {9 J3 Q3 @  J  J- F% ]: p
189. [Microsoft Scriptlet Component]
     0 z! m  q% n# g5 U( x7 V! c
190.   {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation>
     
191. [Google Toolbar Notifier BHO]
     
192.   {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll, Google Inc.>
     
193. [SearchAssistantOC]
     4 c: ]1 s; f% `  B+ M! G
194.   {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
     
195. [SafeMon Class]
     + t1 Q6 s8 L+ A/ _. ?) x9 i- `& t
196.   {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, 360.CN>
     1 \& p% J) M0 K- l& n" N; r2 k% f
197. [RDS.DataSpace]
     . a+ e3 o! F$ D3 ]9 g' w
198.   {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
     % }  ]5 Z0 i/ }6 i1 e: t" m
199. [KooPlayer Control]
     % t: L5 g. B2 u0 d8 @: X1 l
200.   {C728DAB8-FDF5-4CD7-89DD-879D25794C77} <C:\WINDOWS\system32\CCTVKO~1.OCX, Koos>
     
201. [AUDIO__MID Moniker Class]
     5 B6 S+ {7 `1 z; K3 D  n! h
202.   {CD3AFA74-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     + {& A$ |9 ]: P9 ~% P5 s
203. [AUDIO__MP3 Moniker Class]
     4 N- s+ O5 I- a' s- ?
204.   {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     ) i4 y3 ?' f4 G& y8 p% V; u
205. [AUDIO__X_MS_WMA Moniker Class]
     6 L9 N2 G- h0 L; T3 h# A2 q/ ^
206.   {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     7 v- t. A) R" r
207. [VIDEO__X_MS_WMV Moniker Class]
     + q) L4 a# l: W9 J) p  F) Q# p
208.   {CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     7 q& X$ S- m" M) b' s
209. [RealPlayer G2 Control]
     
210.   {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
     4 o4 V+ d% F2 n* K! R" a7 P5 Y. f! @
211. [Shockwave Flash Object]
     : Y. j& {+ b+ F; `2 H# j# E
212.   {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx, Adobe Systems, Inc.>
     
213. [KUpdateObj2 Class]
     
214.   {D82303B7-A754-4DCB-8AFC-8CF99435AACE} <C:\WINDOWS\system32\KingSoft\KOS\UpdateOcx2.dll, Kingsoft Corporation>
     
215. [kingsoft browser shield]
     
216.   {D963BE1A-6B35-47DB-B002-49FAE71D85CC} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KASBrowserShield.DLL, Kingsoft Corporation>
     2 l: l1 C# f. T6 Z
217. [PasswordEditCtrl Class]
     & v# w- L2 p9 `# _* H: K. p
218.   {E787FD25-8D7C-4693-AE67-9406BC6E22DF} <C:\WINDOWS\system32\qqedit\qqedit.dll, 腾讯科技（深圳）有限公司>
     - G8 ?% U  |. Y* A; C: F, _
219. [QvodCtrl Class]
     * S/ L8 [9 ]; B& s6 \
220.   {F3D0D36F-23F8-4682-A195-74C92B03D4AF} <C:\Program Files\QvodPlayer\QvodInsert.dll, Shenzhen QVOD Technology Co.,Ltd>
     7 J% v" e4 O" n. w
221. [&使用超级旋风下载]
     
222.   <C:\Program Files\Tencent\QQDownload\geturl.htm, N/A>
     
223. [&使用超级旋风下载全部链接]
     5 ~" k$ ~( H% M/ o
224.   <C:\Program Files\Tencent\QQDownload\getAllurl.htm, N/A>
     , W( d: h( V/ j8 u  W  q- o' W
225. [使用迅雷下载]
     
226.   <, N/A>
     8 _# c; m" n) f
227. [使用迅雷下载全部链接]
       U( e, G( P1 U" L
228.   <, N/A>
     ! m; u; ]9 D9 ]. c  Q5 I' s) D
229. [导出到 Microsoft Office Excel(&X)]
     
230.   <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
     
231. [添加到QQ表情]
     
232.   <C:\Program Files\Tencent\QQ\AddEmotion.htm, N/A>
       u- n& N, g* ~# D  [+ o8 \( c
233. ==================================
     8 K* A0 C) \1 o; q0 w
234. 正在运行的进程
     " L, }$ R  B  V! ?# z
235. [PID: 444 / SYSTEM][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     $ o) ?, Y- d" x1 i4 k
236. [PID: 496 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     # w0 y/ O- R" M9 q4 x
237. [PID: 520 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
238.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
     ) \" T# h' O8 u" z, H9 l
239. [PID: 564 / SYSTEM][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
240. [PID: 576 / SYSTEM][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
241. [PID: 720 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
242. [PID: 780 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     ( v7 T( K# o- P; [& B  w
243. [PID: 856 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
244. [PID: 944 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     # |$ K, P& U8 }; n, M! s
245. [PID: 1012 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     1 ^9 B; h$ E8 v) U
246. [PID: 1236 / Administrator][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_qfe.070613-1311)]
     
247.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
248.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     : l2 H7 N; @4 T8 a# L
249.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
     0 g& B5 D: e+ Y0 _, W
250.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
251.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KAVEXT.DLL]  [Kingsoft Corporation, 2008,05,07,373]
     * R- ~: Q1 t: y" q1 O
252.     [C:\Program Files\Tencent\QQ\qdshm.dll]  [, 1, 0, 101, 20]
     5 W. `7 q6 I) v; K& L) B
253.     [C:\Program Files\Tencent\QQ\MFC42.DLL]  [Microsoft Corporation, 6.00.8665.0]
     
254.     [C:\Program Files\WinRAR\rarext.dll]  [N/A, ]
     
255.     [C:\WINDOWS\system32\shlhook.dll]  [Beijing Rising Technology Co., Ltd., 4.0.0.9]
     2 _7 m9 ^; y" N! y
256.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
257.     [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
     * R& w7 Z+ e9 b0 w7 k8 `2 m3 l$ n
258. [PID: 1332 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
     ! l. [9 d8 a. E
259.     [C:\WINDOWS\system32\mdimon.dll]  [Microsoft Corporation, 11.3.8166.2]
     ) m; O/ e; U# o$ w* s, q% r, u+ K
260.     [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll]  [Microsoft Corporation, 11.3.8166.2]
     
261. [PID: 1540 / Administrator][C:\Program Files\360safe\AntiArp\AntiArp.exe]  [360安全中心, 2, 0, 0, 1008]
     8 B. f2 z/ |6 y$ v% P
262.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     $ r. g' ^9 Y0 s2 T% [/ A0 c
263.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
264.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     2 U* F( p/ M8 {. H' a& @0 o0 S! S
265.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
266. [PID: 1560 / Administrator][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     2 ]4 o: h5 S$ Y0 G( E- }) w
267.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     ) D* I1 Q* \% G2 N+ [; v% w9 O
268.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
269.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
270. [PID: 1576 / Administrator][C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe]  [Google Inc., 2, 0, 301, 1654]
     
271.     [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\gtn.dll]  [Google Inc., 2, 0, 301, 7164]
     
272.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
273.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     " \1 X! }. u* e% `" t1 k
274.     [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\res_zh-CN.dll]  [Google Inc., 2, 0, 301, 7164]
     4 o! i$ |; e3 i8 r1 t5 T; @. ?
275.     [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll]  [Google Inc., 2, 0, 301, 7164]
     # J5 Y2 U7 |6 G& l3 {
276.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     % x. g9 f! Z3 E0 I/ y' C7 g* M# A# s7 \* C
277.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
278. [PID: 1648 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
279. [PID: 1744 / SYSTEM][C:\Program Files\QvodPlayer\QvodTerminal.exe]  [Shenzhen QVOD Technology Co.,Ltd, 2, 5, 0, 53]
     / d8 ~9 L6 h  ?5 M4 d- b$ |
280. [PID: 1860 / SYSTEM][C:\WINDOWS\system32\skeys.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     - q& }( x, l7 e/ X6 `' D. F9 S
281. [PID: 1908 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     1 w5 }8 i9 g3 ?/ c. k6 N7 a+ w) Y
282. [PID: 1964 / LOCAL SERVICE][C:\WINDOWS\system32\wdfmgr.exe]  [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
     / H2 [! G4 f* y9 w
283. [PID: 2772 / Administrator][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
     
284.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     ; z9 p: G) _6 ?2 I
285.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     * r& {  [8 Z/ B0 c0 I
286.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     % p7 {, W+ X/ C6 E
287.     [c:\program files\google\googletoolbar2.dll]  [Google Inc., 4, 0, 1606, 6690]
     
288.     [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll]  [Google Inc., 2, 0, 301, 7164]
     3 _5 ?) `5 U5 A! z6 }: ^* U0 l/ O
289.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KASBrowserShield.DLL]  [Kingsoft Corporation, 2008,04,15,2]
     
290.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddy.dll]  [Kingsoft Corporation, 2008,04,15,2]
     # D; v3 _; ~( y' y3 \% p
291.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddyExt.DLL]  [Kingsoft Corporation, 2008,05,14,83]
     2 m/ b3 l$ ~6 j8 a$ s- N6 z& s
292.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KANTray.dll]  [Kingsoft Corporation, 2008,04,15,2]
     + T8 i# H$ d0 W1 a" i
293.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KAVAFish.DLL]  [Kingsoft Corporation, 2008,05,13,78]
     7 u) L$ |$ r7 T7 r7 \- T3 J, P
294.     [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
     
295.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
     
296.     [C:\WINDOWS\system32\WN.IME]  [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
     
297.     [C:\Program Files\ShiQiang\wnime\Dll32\wnpy_StatusWnd.dll]  [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
     - A& g1 _! s8 C, ?3 S: i: ~
298.     [C:\Program Files\ShiQiang\wnime\Dll32\wnpy_CompWnd.dll]  [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
     
299.     [C:\Program Files\ShiQiang\wnime\Dll32\wnpy_Query.dll]  [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
     
300.     [C:\WINDOWS\system32\SOGOUPY.IME]  [Sogou.com Inc., 3.2.0.0]
     
301.     [C:\Documents and Settings\Administrator\My Documents\SogouInput\Plugin\SgImeWord.dll]  [Sogou.com Inc., 3.2.0.0]
     ! V1 C% t5 p, v# p2 r! ]
302.     [C:\WINDOWS\system32\WINWB98.IME]  [Microsoft Corporation, 4.00.950]
     % Q( J& F# a4 s) E4 f
303.     [C:\WINDOWS\system32\WINWB86.IME]  [Microsoft Corporation, 4.00.950]
     
304.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     2 T, ?- Q0 K; a! u2 k
305. [PID: 1124 / Administrator][C:\Program Files\Tencent\QQ\TXPlatform.exe]  [Tencent, 1, 0, 170, 0]
     
306.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
307.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
308.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
309.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
310. [PID: 928 / Administrator][F:\arvmon.exe]  [任软工作室, 2.2.5.201]
     
311.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     $ K! ~0 {$ V6 Z1 i# u4 b+ b
312.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
313.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
314.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     + p& V# q+ {7 j- L. b$ q0 I
315.     [F:\Vdata.dll]  [任软工作室, 2, 2, 1, 94]
     0 M/ i# r2 M' Q0 s% b& G" k
316. [PID: 2540 / Administrator][F:\AutoGuarder.exe]  [任软工作室, 2.2.5.201]
     3 G7 n: \7 w2 J- C2 y
317.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     % l9 I/ n4 A0 j+ T% s1 q9 `/ |
318.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     " w* j& y$ e# o$ }9 ~7 n
319.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     ! \# \8 Y+ M8 a$ }2 ~8 t( r
320.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
321. [PID: 2476 / Administrator][d:\我的文档\桌面\系统检测修复\SREngPS.EXE]  [Smallfrogs Studio, 2.5.16.900]
     2 f& d" z' P- d9 {
322.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     7 D6 N( u# P* K
323.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     0 Z9 [% w4 z& a$ ^) h: x1 ^5 i
324.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
325.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     ! Q! @& S% i+ J
326.     [d:\我的文档\桌面\系统检测修复\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]
     2 t8 D3 x& y) Z# S! w6 g
327. ==================================
     
328. 文件关联
     9 E& O2 w" F# g" \' q" T  d
329. .TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
     
330. .EXE  OK. ["%1" %*]
     
331. .COM  OK. ["%1" %*]
     
332. .PIF  OK. ["%1" %*]
     8 y. i* s- _& L% s' I% Y6 w
333. .REG  OK. [regedit.exe "%1"]
     8 b, D' U3 h3 F1 I
334. .BAT  OK. ["%1" %*]
     
335. .SCR  OK. ["%1" /S]
     - D9 j  O2 S. A2 x
336. .CHM  OK. ["C:\WINDOWS\hh.exe" %1]
     
337. .HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
     % g) K- v( W: A. W* a/ `
338. .INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
     1 w6 R6 h. R: _6 q% Y( g& ], P+ @
339. .INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
     
340. .VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
     8 S. v" Y- `( [
341. .JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
     
342. .LNK  OK. [{00021401-0000-0000-C000-000000000046}]
     
343. ==================================
     - l+ g; {- f% d' D, [" N7 K
344. Winsock 提供者
     8 Y5 a. |+ N3 ~+ z) a! @
345. N/A
     
346. ==================================
     
347. Autorun.inf
     
348. N/A
     * I  {0 d7 t; |. K  t8 V. P
349. ==================================
     & J! V, P* h: r" z
350. HOSTS 文件
       K+ _2 d% r7 D) L6 a7 O- i
351. N/A
     
352. ==================================
     
353. 进程特权扫描
     
354. 特殊特权被允许： SeLoadDriverPrivilege [PID = 520, C:\WINDOWS\SYSTEM32\WINLOGON.EXE]
     0 I# O  w) L% P% }; `
355. 特殊特权被允许： SeDebugPrivilege [PID = 928, F:\ARVMON.EXE]
     
356. 特殊特权被允许： SeLoadDriverPrivilege [PID = 928, F:\ARVMON.EXE]
     
357. 特殊特权被允许： SeDebugPrivilege [PID = 2540, F:\AUTOGUARDER.EXE]
     : w( Z& o' Z+ d4 j* I" |  i
358. 特殊特权被允许： SeLoadDriverPrivilege [PID = 2540, F:\AUTOGUARDER.EXE]
     / k& q- k! d6 N6 z' w
359. ==================================
     
360. API HOOK
     
361. N/A
     % b( E3 s/ F) L* z
362. ==================================
     
363. 隐藏进程
     
364. N/A
     
365. ==================================
     ) M7 r4 O  D9 X) K7 ^
366. 
     

复制代码

傲天♂扬帆

跟原始说了，不知道能不能看明白。。。

傲天♂元始

[Start]

2008-05-22,22:24:21

: Y* F- d6 {# R& B& L. fSREngLOG智能分析专家 V1.2.0.125
Tored (http://hi.baidu.com/peaset)

======================================================
  B# }3 I. L) b$ ~6 ?3 `以下过程将用到SREng、PowerRmv，如果您不熟悉这两款工具的使用方法，请参考下列链接：
6 y  c4 L) h4 I' z0 p& ZSREng详细操作方法： http://hi.baidu.com/peaset/blog/ ... dd19224e4aeadf.html
PowerRmv详细操作方法： http://hi.baidu.com/peaset/blog/ ... 6fb5eb77c63816.html
" N& R0 @: C4 s( M7 |======================================================
: k4 b; s  _1 j( L: x9 {& h( a
! T3 L9 a+ J8 _7 |0 F9 Z3 c以下是病毒清除步骤：

1、用PowerRmv删除以下文件(没有则跳过)：

; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
;
* o( b% z6 l- F* }; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
C:\WINDOWS\System32\3wareSrv.exe
\SystemRoot\C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll
; N) }: l9 W. \% _( B# B9 i
. ?+ O8 R# s! \0 x0 h0 g2 Y! r\SystemRoot\System32\DRIVERS\22jn.sys
- b- {0 t% S# y8 w7 Y* R$ e$ u9 B\SystemRoot\System32\DRIVERS\43ecu.sys
2 G9 \, F. h# [9 O' h% s& Z\??\C:\Documents and Settings\All Users\Application Data\Microsoft\Office\SYSTEM\ntptdb.sys
, o- k9 {2 ~) W8 ]2 s( f\SystemRoot\system32\drivers\pnduojtwbt.sys
7 G" t2 w) w* L/ G0 g( D; \\SystemRoot\system32\drivers\RsBoot.sys
system32\DRIVERS\sr.sys
! v  v9 l2 W2 K6 G\SystemRoot\system32\drivers\unzxzsrs.sys
\SystemRoot\system32\DRIVERS\ViBus.sys
5 D  o' k( o" v" f! b. `\SystemRoot\system32\drivers\zhibmaso.sys
$ t* E: n" i3 q$ k% D1 T
; j1 t5 K+ V2 c& j# D2、用SREng删除以下【注册表】项(没有则跳过)：

, g9 b. a! v) r* e3 g<IMJPMIG8.1>
, _' S. V% A& {) Y$ h( B* F! g<PHIME2002A>
9 |  a) Q  p) T+ b/ s+ u/ k- H<PHIME2002ASync>
* g* A. \/ g( }* b
6 z/ r$ I; ]7 F% v, ?, ?* H3、用SREng删除【所有启动文件夹】内容(没有则跳过)
' r  n. z5 p! s
4、用SREng删除以下【服务】项(没有则跳过)：
2 u, C8 C2 g% H( J1 Q/ H2 Y
* E* t% `6 e1 M- t/ u[3ware Controller Service / 3wareSrv]
[NetMeeting Remote Desktop Sharing / mnmsrvc]
- Y* P, y! H. K2 A6 Q% l' v4 O7 n
4 ?' i/ f* `8 G9 o9 H( I5、用SREng删除以下【驱动程序】项(没有则跳过)：

, @8 M" _/ z, v# n" E4 J[22j / 22jn]
[43ec / 43ecu]
[ntptdb / ntptdb]
: C/ v% `  X: R[pnduojtwbt / pnduojtwbt]
* g1 A( `5 u7 v[RsAntiSpyware / RsAntiSpyware]
[System Restore Filter Driver / sr]
" W" }) x" c5 ~* @( K[System Services / unzxzsrs]
[ViBus / ViBus]
! J$ d' q2 t0 N* V[ATI Extend / zhibmaso]
3 [% k* ?3 g# k8 I
7 E+ X2 d) i8 P! b! K7 {6、用SREng删除以下【浏览器加载项】项(没有则跳过)：
$ c( d3 o3 A# e$ N( N) V5 I
[Zcom 杂志]
[Browser Enhanced Objects]

最后,重新启动计算机.Tored祝您好运!
======================================================
; n, c8 y0 a8 X; i/ v: r[End]

傲天♂元始

你就这样弄，不行我也没办法

傲天♂扬帆

独恋有按原始说的重新操作一次吗？

独恋伊影

找不到要删的文件。。。。

傲天♂元始

有些都是隐藏起来的

傲天♂风云

- L& ?$ G! o3 S
& A* X& S6 T, [+ w' N我对代码 一点都不懂

傲天♂元始

。。。这不是代码只是系统的扫描日志而已

傲天♂冷漠

我汗~~~
  r' L! B& M8 K+ Q- E" _+ [0 E这么多代码~~~