在这里

独恋伊影

1. 
   
2. 2008-05-22,20:37:43
   # N3 |* ~! F3 v1 Z; d
3. System Repair Engineer 2.5.16.900
   
4. Smallfrogs (http://www.KZTechs.com)
   
5. Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能
   
6. 以下内容被选中：
   
7.     所有的启动项目（包括注册表、启动文件夹、服务等）
   
8.     浏览器加载项
   
9.     正在运行的进程（包括进程模块信息）
   + F; t, t5 x4 w
10.     文件关联
    + w2 S/ o1 |5 N- P) C
11.     Winsock 提供者
    
12.     Autorun.inf
    0 C8 O' H1 I+ r5 q# g1 j4 y
13.     HOSTS 文件
    
14.     进程特权扫描
    ; N! w4 C4 W; `) V
15. 
    9 C5 b) b/ [4 L! I6 B2 H$ v
16. 启动项目
    8 r+ o, N, i- G/ P: J  E$ V2 Y
17. 注册表
    * o# V: E' d; _  t
18. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    ' n3 e! d/ h( j2 ~/ @5 @+ t7 \# @
19.     <ctfmon.exe><C:\WINDOWS\system32\CTFMON.EXE>  [(Verified)Microsoft Windows Publisher]
    
20. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    + D- H9 x5 e8 R  e2 g' T
21.     <360Safebox><"C:\Program Files\360Safebox\safeboxTray.exe" /r>  [(Verified)Qizhi Software (beijing) Co. Ltd]
    . v3 c6 P7 y& ~$ t$ n
22.     <360Safetray><C:\Program Files\360safe\safemon\360tray.exe /start>  [(Verified)Qizhi Software (beijing) Co. Ltd]
    
23.     <360Antiarp><C:\Program Files\360safe\AntiArp\AntiArp.exe /start>  [(Verified)Qizhi Software (beijing) Co. Ltd]
    6 ]* `! t  M- N
24.     <KavStart><"C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KAVStart.exe" -startup>  [(Verified)KINGSOFT CORPORATION]
    4 n; p( w6 R( A  R% Y& Q+ f
25.     <IMJPMIG8.1><; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32>  [N/A]
    
26.     <PHIME2002A><; >  [N/A]
    
27.     <PHIME2002ASync><; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32>  [N/A]
    
28. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    / u# ^' k+ H' S$ O) U6 t1 |' ?
29.     <shell><Explorer.exe>  [(Verified)Microsoft Windows Component Publisher]
    7 S- o1 V2 Q  W, u
30.     <Userinit><C:\WINDOWS\system32\UserInit.exe,>  [(Verified)Microsoft Windows Publisher]
    
31.     <UIHost><logonui.exe>  [(Verified)Microsoft Windows Publisher]
    
32. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    0 m( n/ G% O+ o9 m+ \4 u) s
33.     <{AC2DC2EF-5165-40A3-8CDF-41DCA1B0901A}><C:\WINDOWS\system32\shlhook.dll>  [Beijing Rising Technology Co., Ltd.]
    + p9 }# [- U7 q% H
34. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
    3 m6 ~7 m' Q7 c- L- U0 j( p
35.     <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE>  [N/A]
    ) h4 Q! s+ c" I' S. t8 i# G
36. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
    
37.     <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [N/A]
    " V- e) D$ {% l5 @) _
38. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
    4 R; U; t( b1 O7 p
39.     <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [N/A]
    2 v& P9 }9 ^" i' I: W: f6 _
40. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
    + `3 S: j0 _5 N2 b$ a
41.     <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [N/A]
    5 k# S1 L+ I! l  n  ~+ r1 E
42. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
    
43.     <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Remove.PerUser.NT>  [(Verified)Microsoft Windows Publisher]
    
44. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
    - R" X, h6 Y& A- J
45.     <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser>  [(Verified)Microsoft Windows Publisher]
    ! z- S* O8 m; z# J( k" R
46. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
    
47.     <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp10.inf,PerUserStub>  [(Verified)Microsoft Windows Publisher]
    + |7 H+ K# N2 R+ _
48. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
    
49.     <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [N/A]
    
50. ==================================
    
51. 启动文件夹
    
52. N/A
    
53. ==================================
    ! }3 L2 \; Y1 a" N1 F. ~9 T
54. 服务
    
55. [3ware Controller Service / 3wareSrv][Stopped/Auto Start]
    4 n: y% Z4 o, w5 A" Q8 ^( ?
56.   <C:\WINDOWS\System32\3wareSrv.exe><N/A>
    
57. [Google Updater Service / gusvc][Stopped/Manual Start]
    3 q& n* j. R, \2 `
58.   <"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"><Google>
    ( I) ]1 Y) \$ Q& N; Q- {/ m. C# r
59. [Help and Support / helpsvc][Stopped/Disabled]
    
60.   <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll><N/A>
    : `* e1 t% a) i" R1 U6 d+ W7 k+ b
61. [Human Interface Device Access / HidServ][Stopped/Boot Start]
    & \, m) n9 i# K8 Q
62.   <\SystemRoot\C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
    . D5 H! o: w6 R' [
63. [Kingsoft Internet Security Common Service / KISSvc][Stopped/Auto Start]
    , ^% m* R/ d) m5 \( M9 }1 P0 S
64.   <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KISSvc.EXE><Kingsoft Corporation>
    5 h/ Q4 \) W4 K' @8 d
65. [Kingsoft Personal Firewall Service / KPfwSvc][Running/Auto Start]
    6 |8 }  H% O) @0 |
66.   <"C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KPfwSvc.EXE"><Kingsoft Corporation>
    4 s, y) P/ X& x& y8 O5 N
67. [Kingsoft Antivirus KWatch Service / KWatchSvc][Running/Auto Start]
    
68.   <"C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KWatch.EXE"><Kingsoft Corporation>
    1 j* B! x1 C# A' f6 _
69. [NetMeeting Remote Desktop Sharing / mnmsrvc][Stopped/Manual Start]
    ' w+ b9 z1 I( p1 z& J2 |
70.   <><N/A>
    
71. [Qvod Terminal / Qvod Terminal][Running/Auto Start]
    
72.   <C:\Program Files\QvodPlayer\QvodTerminal.exe><Shenzhen QVOD Technology Co.,Ltd>
    3 B! Y" l6 \( O" @, B- k
73. ==================================
    
74. 驱动程序
    
75. [22j / 22jn][Stopped/Boot Start]
    
76.   <\SystemRoot\System32\DRIVERS\22jn.sys><N/A>
    
77. [360AntiArp / 360AntiArp][Running/System Start]
    7 t+ X8 M% x* w4 `
78.   <\??\C:\WINDOWS\system32\drivers\360AntiArp.sys><360安全中心>
    
79. [43ec / 43ecu][Stopped/Boot Start]
    : R8 ^# {* W# x) |
80.   <\SystemRoot\System32\DRIVERS\43ecu.sys><N/A>
    6 J/ G8 M0 x# S5 b! r
81. [Intel(r) 82801 Audio Driver Install Service (WDM) / ac97intc][Running/Manual Start]
    
82.   <system32\drivers\ac97intc.sys><Intel Corporation>
    ' L# ~9 t5 g! P$ H, l! F# g. y
83. [Promise driver accelerator / bb-run][Running/Boot Start]
    
84.   <\SystemRoot\system32\DRIVERS\bb-run.sys><Promise Technology, Inc.>
    # G) W8 n) m8 Q3 F/ A3 @
85. [Promise Removable Disk Control Driver / dontgo][Running/Boot Start]
    
86.   <\SystemRoot\system32\DRIVERS\DontGo.sys><Promise Technology, Inc.>
    # L: O" h( \9 l5 R- k# F
87. [KAVBase / KAVBase][Running/Auto Start]
    
88.   <\??\C:\WINDOWS\system32\Drivers\KAVBase.sys><Kingsoft Corporation>
    - P. D; Z1 |- r
89. [KAVBootC / KAVBootC][Running/Boot Start]
    
90.   <\SystemRoot\system32\Drivers\KAVBootC.sys><Kingsoft Corporation>
    
91. [KAVSafe / KAVSafe][Running/Auto Start]
      t6 Y/ Z! D9 T+ J# X2 F
92.   <\??\C:\WINDOWS\system32\Drivers\KAVSafe.sys><Kingsoft Corporation>
    6 J7 R, B( Y2 w
93. [KNetWch / KNetWch][Running/System Start]
    - m$ W" z% s# ~9 y  V7 c1 F# z
94.   <\??\C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KNetWch.SYS><Kingsoft Corporation>
    
95. [KWatch3 / KWatch3][Running/Auto Start]
    # `! O  [* J, w+ A) L
96.   <\??\C:\WINDOWS\system32\drivers\KWatch3.SYS><Kingsoft Corporation>
    % m8 P- h9 t/ ]$ Z5 W6 R
97. [ntptdb / ntptdb][Stopped/Auto Start]
    
98.   <\??\C:\Documents and Settings\All Users\Application Data\Microsoft\Office\SYSTEM\ntptdb.sys><N/A>
    
99. [nv / nv][Running/Manual Start]
    2 R0 J/ m0 t9 r
100.   <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
     9 e- C' W: @0 ?
101. [NVIDIA nForce RAID Driver / nvrd32][Running/Boot Start]
     1 R( Y0 g- i7 S0 y' c! z9 u3 G! S
102.   <\SystemRoot\system32\DRIVERS\nvrd32.sys><NVIDIA Corporation>
     % R$ A5 o/ \5 |* g" d- ^6 ?
103. [DDK PACKET Protocol / Packet][Running/Manual Start]
     
104.   <system32\DRIVERS\ProtoDrv.sys><360安全中心>
     7 q& `, [1 }3 v7 I" j; D0 _
105. [pnduojtwbt / pnduojtwbt][Stopped/Boot Start]
     
106.   <\SystemRoot\system32\drivers\pnduojtwbt.sys><N/A>
     
107. [Direct Parallel Link Driver / Ptilink][Running/Manual Start]
     + D! r! G- n1 k* |6 G3 V! }
108.   <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
       L7 [8 Z% e/ T% j
109. [RsAntiSpyware / RsAntiSpyware][Stopped/Boot Start]
     
110.   <\SystemRoot\system32\drivers\RsBoot.sys><N/A>
     
111. [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start]
     
112.   <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
     8 B8 m; A+ o) ?6 X, t
113. [SafeBoxKrnl / SafeBoxKrnl][Running/System Start]
     
114.   <\??\C:\Program Files\360Safebox\SafeBoxKrnl.sys><360安全中心>
     
115. [Secdrv / Secdrv][Stopped/Manual Start]
     
116.   <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
     
117. [SATALink External Device Filter / SiRemFil][Running/Boot Start]
     & x# s2 Q1 q; r2 m6 k
118.   <\SystemRoot\system32\DRIVERS\SiRemFil.sys><Silicon Image, Inc.>
     
119. [System Restore Filter Driver / sr][Stopped/Disabled]
     - b$ H+ Z* |9 n( h1 `, w
120.   <system32\DRIVERS\sr.sys><N/A>
     & N- K! N7 f, J( x* I8 y8 j
121. [TesSafe / TesSafe][Stopped/Manual Start]
     
122.   <\??\C:\WINDOWS\system32\TesSafe.sys><TENCENT>
     9 p+ V1 W& l4 f  Q
123. [System Services / unzxzsrs][Stopped/Boot Start]
     ; r* k/ [. A1 U7 J+ ]0 |* s
124.   <\SystemRoot\system32\drivers\unzxzsrs.sys><N/A>
     7 `8 M+ Y7 s* c/ }. `. l8 R
125. [ViBus / ViBus][Stopped/Boot Start]
     % X0 z; s0 Q8 W$ D
126.   <\SystemRoot\system32\DRIVERS\ViBus.sys><N/A>
     ( L% E9 ~4 |/ ?: G$ X
127. [World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start]
     # J4 z0 ^" m9 G" s& U/ T
128.   <system32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>
     $ S  d( V1 x+ F( y* M0 j0 \+ h
129. [VIA SATA IDE Hot-plug Driver / xfilt][Running/Boot Start]
     1 z* R: v) }/ A0 V" _% c& Z
130.   <\SystemRoot\system32\DRIVERS\xfilt.sys><VIA Technologies,Inc>
     ; O/ W7 C1 W4 O& \( {. ]+ S( G
131. [ATI Extend / zhibmaso][Stopped/Boot Start]
     
132.   <\SystemRoot\system32\drivers\zhibmaso.sys><N/A>
     
133. [Vimicro USB PC Camera (ZC0301PL) / ZSMC301b][Running/Manual Start]
     ( X& G7 Z) F+ r" C$ _
134.   <System32\Drivers\usbVM31b.sys><Vimicro Corporation>
     
135. ==================================
     
136. 浏览器加载项
     0 l9 `* F3 [3 p, j7 V- D0 q
137. [Google Toolbar Helper]
     $ S. @! k1 b- \* h6 X# J7 X
138.   {AA58ED58-01DD-4d91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     0 B% \! J& e. z9 |
139. [Google Toolbar Notifier BHO]
     6 t% A- w, D& I, R5 i. I
140.   {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll, Google Inc.>
     * U  W( B2 C2 l: P3 G/ N4 b
141. [SafeMon Class]
     ) J" V" |5 u, D- M% M
142.   {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, 360.CN>
     
143. [kingsoft browser shield]
     ! x5 w1 k0 l5 r( q
144.   {D963BE1A-6B35-47DB-B002-49FAE71D85CC} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KASBrowserShield.DLL, Kingsoft Corporation>
     8 f* H7 b$ j5 J6 ^' U9 ~3 Q
145. [IEBuddyExtControl Class]
     
146.   {3AECD3C1-7085-4731-96DC-47B6CF7EF749} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddyExt.DLL, Kingsoft Corporation>
     ; q6 }/ @+ ^. x' Y1 r; ^" J
147. [Zcom 杂志]
     - t7 b7 h. c- J* h: e7 {+ S
148.   {4045D313-1D5E-4fe4-93A0-A34630B6A00B} <C:\Zcom\E-Space.exe, N/A>
     
149. [&Google]
     
150.   {2318C2B1-4965-11d4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     6 D: j. f; |2 P" W: r9 A4 k3 A( b
151. [KooPlayer Control]
     % z* Y8 [% d) z- R
152.   {C728DAB8-FDF5-4CD7-89DD-879D25794C77} <C:\WINDOWS\system32\CCTVKO~1.OCX, Koos>
     ) C9 U9 B* A, V4 z8 R
153. [Shockwave Flash Object]
     
154.   {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx, Adobe Systems, Inc.>
     1 B$ p/ v0 i  B2 B2 _' v+ e
155. [KUpdateObj2 Class]
     - y1 G0 q- r$ g9 P( }/ P4 \2 L
156.   {D82303B7-A754-4DCB-8AFC-8CF99435AACE} <C:\WINDOWS\system32\KingSoft\KOS\UpdateOcx2.dll, Kingsoft Corporation>
     
157. [Google Script Object]
     
158.   {00EF2092-6AC5-47C0-BD25-CF2D5D657FEB} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     
159. [EWA Control]
     ) Q' o5 q" E5 ?! ^! g& _
160.   {18226BF8-DC0B-4D81-80E9-A41AE37BB73A} <C:\PROGRA~1\PPLive\SYNACA~2.OCX, Synacast>
     : W9 p; S# O7 [5 A9 ?. }9 }
161. [Windows Media Player]
     6 d: N! L% @3 O4 I# s
162.   {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\msdxm.ocx, Microsoft Corporation>
     
163. [&Google]
     / _. @5 a3 m% A
164.   {2318C2B1-4965-11D4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     
165. [HTML Document]
     - ?. `/ _: ?% q: ?5 Z
166.   {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
     
167. [DHTML Edit Control Safe for Scripting for IE5]
     
168.   {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, Microsoft Corporation>
     
169. [RealPlayer RAM Download Handler]
     
170.   {2F542A2E-EDC9-4BF7-8CB1-87C9919F7F93} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
     
171. [IEBuddyExtControl Class]
     
172.   {3AECD3C1-7085-4731-96DC-47B6CF7EF749} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddyExt.DLL, Kingsoft Corporation>
     
173. [XML Document]
     
174.   {48123BC4-99D9-11D1-A6B3-00C04FD91555} <C:\WINDOWS\system32\msxml3.dll, Microsoft Corporation>
     
175. [HHCtrl Object]
     
176.   {52A2AAAE-085D-4187-97EA-8C30DB990436} <C:\WINDOWS\system32\hhctrl.ocx, Microsoft Corporation>
     
177. [Windows Media Player]
     4 ^# L8 ~! H3 P% M4 y* n$ o
178.   {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     & e/ k& h% h$ C6 U: S/ o( v7 v0 I
179. [Active Desktop Mover]
     
180.   {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A>
     
181. [360SafeLive]
     
182.   {87515F61-A66C-4319-A0E0-D416CB8059E3} <C:\Program Files\360safe\live.dll, 360.cn>
     % f  G" `; }, `8 _2 \" ^' L0 k
183. [Microsoft Web 浏览器]
     
184.   {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
     9 ]' ]( {; x( o! l/ N
185. [Browser Enhanced Objects]
     
186.   {986488AF-13D5-9DDF-4FEF-9FB88698CFC1} <C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\USERDATA\webbrowser_2011.dll, N/A>
     2 }- L* H9 H& `; ^  H( K$ p1 P
187. [Google Toolbar Helper]
     ) i2 p: a) P0 J7 N
188.   {AA58ED58-01DD-4D91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     & B: D  W$ P( b! X7 @% N
189. [Microsoft Scriptlet Component]
     
190.   {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation>
     . {2 E% o  ~3 @4 g" {
191. [Google Toolbar Notifier BHO]
     
192.   {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll, Google Inc.>
     
193. [SearchAssistantOC]
     
194.   {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
     6 K" t  K7 |& h1 a1 @% ~3 D) X3 [# L
195. [SafeMon Class]
     
196.   {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, 360.CN>
     
197. [RDS.DataSpace]
     , y5 h. j* u5 g8 @( b+ Z" {' z$ R
198.   {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
     ; r3 ]3 H# q* b  N% v- U- t- Y
199. [KooPlayer Control]
     
200.   {C728DAB8-FDF5-4CD7-89DD-879D25794C77} <C:\WINDOWS\system32\CCTVKO~1.OCX, Koos>
     
201. [AUDIO__MID Moniker Class]
     
202.   {CD3AFA74-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     8 h# l5 |7 X/ h- C; v; U
203. [AUDIO__MP3 Moniker Class]
     
204.   {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     
205. [AUDIO__X_MS_WMA Moniker Class]
     
206.   {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     * V+ u2 X8 W6 B. W9 x: x$ P
207. [VIDEO__X_MS_WMV Moniker Class]
     
208.   {CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     
209. [RealPlayer G2 Control]
     
210.   {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
     / |2 \8 B, ~- w; V; z
211. [Shockwave Flash Object]
     + E4 l* a5 {6 Z1 S
212.   {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx, Adobe Systems, Inc.>
     
213. [KUpdateObj2 Class]
     
214.   {D82303B7-A754-4DCB-8AFC-8CF99435AACE} <C:\WINDOWS\system32\KingSoft\KOS\UpdateOcx2.dll, Kingsoft Corporation>
     : A% z8 {* X8 E- H) H
215. [kingsoft browser shield]
     - @; x7 E. b  i; W+ v
216.   {D963BE1A-6B35-47DB-B002-49FAE71D85CC} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KASBrowserShield.DLL, Kingsoft Corporation>
     % \! a  P* e; z% k$ Y7 ^4 K3 V
217. [PasswordEditCtrl Class]
     
218.   {E787FD25-8D7C-4693-AE67-9406BC6E22DF} <C:\WINDOWS\system32\qqedit\qqedit.dll, 腾讯科技（深圳）有限公司>
     
219. [QvodCtrl Class]
     
220.   {F3D0D36F-23F8-4682-A195-74C92B03D4AF} <C:\Program Files\QvodPlayer\QvodInsert.dll, Shenzhen QVOD Technology Co.,Ltd>
       H3 _. T9 r. ~/ T/ u
221. [&使用超级旋风下载]
     ) C: |) M4 n; i1 s9 E1 ?5 s
222.   <C:\Program Files\Tencent\QQDownload\geturl.htm, N/A>
     1 e& r2 m, k9 E2 Q# B
223. [&使用超级旋风下载全部链接]
     ; P8 A7 N' |( V1 d% M4 |  b
224.   <C:\Program Files\Tencent\QQDownload\getAllurl.htm, N/A>
     
225. [使用迅雷下载]
     % f1 v" I6 \6 z1 K3 q
226.   <, N/A>
     / z" G  G2 u  C; p8 J- [
227. [使用迅雷下载全部链接]
     % ]2 W5 `' B4 p3 G- U1 N- ?
228.   <, N/A>
     ! s* n8 J$ P8 d% }& }% h+ [+ K
229. [导出到 Microsoft Office Excel(&X)]
     
230.   <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
     3 s; u7 H; t1 S) `3 u
231. [添加到QQ表情]
     
232.   <C:\Program Files\Tencent\QQ\AddEmotion.htm, N/A>
     ; \' l5 f2 a, H. e* ~
233. ==================================
     
234. 正在运行的进程
     
235. [PID: 444 / SYSTEM][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
236. [PID: 496 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     ! |- g. H6 B2 q3 [/ r* V  E
237. [PID: 520 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
238.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
     
239. [PID: 564 / SYSTEM][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     * f+ r2 u; p6 R& l5 N% h
240. [PID: 576 / SYSTEM][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     " S9 V0 n! r2 ^/ r5 M
241. [PID: 720 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     1 p6 H  P, E. b9 ?8 k
242. [PID: 780 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     : d8 q; h5 @1 B
243. [PID: 856 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
244. [PID: 944 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     : ]6 [' S, l& s3 }# f
245. [PID: 1012 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     3 U% Y1 G: E7 M# Q% w1 j, X
246. [PID: 1236 / Administrator][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_qfe.070613-1311)]
     ; F( O# \/ k* c* s0 n
247.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     ; B; A: a& `0 n1 H5 e* V, B0 G
248.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     : P* j5 v; S0 ]: L( t6 y8 j
249.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
     ' f; P- ~; s1 r$ m
250.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     1 n* g6 B. `0 ], j+ y
251.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KAVEXT.DLL]  [Kingsoft Corporation, 2008,05,07,373]
     
252.     [C:\Program Files\Tencent\QQ\qdshm.dll]  [, 1, 0, 101, 20]
     
253.     [C:\Program Files\Tencent\QQ\MFC42.DLL]  [Microsoft Corporation, 6.00.8665.0]
     
254.     [C:\Program Files\WinRAR\rarext.dll]  [N/A, ]
     
255.     [C:\WINDOWS\system32\shlhook.dll]  [Beijing Rising Technology Co., Ltd., 4.0.0.9]
     
256.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     6 x3 q, a7 s$ F0 E' d; \* h0 I% u
257.     [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
     0 g& H3 z; n4 s5 u! u! D
258. [PID: 1332 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
     
259.     [C:\WINDOWS\system32\mdimon.dll]  [Microsoft Corporation, 11.3.8166.2]
     
260.     [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll]  [Microsoft Corporation, 11.3.8166.2]
     
261. [PID: 1540 / Administrator][C:\Program Files\360safe\AntiArp\AntiArp.exe]  [360安全中心, 2, 0, 0, 1008]
     
262.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     # }; ?8 L% W8 H) v
263.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     : C/ V; L, Z2 K9 k$ \
264.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
265.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     6 ?% P/ n1 c' H0 m
266. [PID: 1560 / Administrator][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     ! {5 r& I7 L$ D/ v6 F3 \
267.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
268.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
269.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     & k6 Q* {4 i5 Z
270. [PID: 1576 / Administrator][C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe]  [Google Inc., 2, 0, 301, 1654]
     / \$ ?, Y4 O$ |( H' Y6 r
271.     [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\gtn.dll]  [Google Inc., 2, 0, 301, 7164]
     % r; @6 p  f  i" C7 n  t2 Z
272.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
273.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     4 S8 E9 {; a" w- i. a+ @1 ]
274.     [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\res_zh-CN.dll]  [Google Inc., 2, 0, 301, 7164]
     
275.     [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll]  [Google Inc., 2, 0, 301, 7164]
     
276.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
277.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     $ I. Y2 w. M; M
278. [PID: 1648 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     0 F6 J+ k/ x' J4 Q* f
279. [PID: 1744 / SYSTEM][C:\Program Files\QvodPlayer\QvodTerminal.exe]  [Shenzhen QVOD Technology Co.,Ltd, 2, 5, 0, 53]
     2 F1 @' y" e  Q. x+ J7 X
280. [PID: 1860 / SYSTEM][C:\WINDOWS\system32\skeys.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     5 _0 ?; h! N* ]9 ~9 T/ r& V
281. [PID: 1908 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
282. [PID: 1964 / LOCAL SERVICE][C:\WINDOWS\system32\wdfmgr.exe]  [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
     
283. [PID: 2772 / Administrator][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
     0 ]: P. o/ s  v# X- |. y
284.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     ) v) R$ P& v# ]
285.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
286.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     5 m1 G2 b, E+ g6 Y, w2 ^
287.     [c:\program files\google\googletoolbar2.dll]  [Google Inc., 4, 0, 1606, 6690]
     8 p  k9 v9 y/ \5 b  J8 s. \
288.     [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll]  [Google Inc., 2, 0, 301, 7164]
     % B7 h$ t6 j# [5 [, K
289.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KASBrowserShield.DLL]  [Kingsoft Corporation, 2008,04,15,2]
     
290.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddy.dll]  [Kingsoft Corporation, 2008,04,15,2]
     
291.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddyExt.DLL]  [Kingsoft Corporation, 2008,05,14,83]
     / Q& I& f5 x! b" S7 L
292.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KANTray.dll]  [Kingsoft Corporation, 2008,04,15,2]
     
293.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KAVAFish.DLL]  [Kingsoft Corporation, 2008,05,13,78]
     
294.     [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
     % a% a% d, t. |6 M; W! a  @4 N' V0 }
295.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
     
296.     [C:\WINDOWS\system32\WN.IME]  [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
     4 J8 K! C1 r* m7 k% ^* C0 ]' v4 Y
297.     [C:\Program Files\ShiQiang\wnime\Dll32\wnpy_StatusWnd.dll]  [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
     & {- P" d4 m  e& h, |2 Z+ ]0 o7 u
298.     [C:\Program Files\ShiQiang\wnime\Dll32\wnpy_CompWnd.dll]  [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
     ' {8 S$ K4 m+ T
299.     [C:\Program Files\ShiQiang\wnime\Dll32\wnpy_Query.dll]  [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
     
300.     [C:\WINDOWS\system32\SOGOUPY.IME]  [Sogou.com Inc., 3.2.0.0]
     
301.     [C:\Documents and Settings\Administrator\My Documents\SogouInput\Plugin\SgImeWord.dll]  [Sogou.com Inc., 3.2.0.0]
     
302.     [C:\WINDOWS\system32\WINWB98.IME]  [Microsoft Corporation, 4.00.950]
     4 \8 P4 a; n: z+ I0 P
303.     [C:\WINDOWS\system32\WINWB86.IME]  [Microsoft Corporation, 4.00.950]
     5 C' ^* Q8 J% ?* j: I$ }
304.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
305. [PID: 1124 / Administrator][C:\Program Files\Tencent\QQ\TXPlatform.exe]  [Tencent, 1, 0, 170, 0]
     % s5 x# {8 G# D$ H6 R* P
306.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     6 x, E) F1 a+ @; }7 @
307.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
308.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
309.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
310. [PID: 928 / Administrator][F:\arvmon.exe]  [任软工作室, 2.2.5.201]
     
311.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     # J2 [  H% L* l# U" s
312.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
313.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
314.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     ! D6 U+ {* J, G4 @
315.     [F:\Vdata.dll]  [任软工作室, 2, 2, 1, 94]
     5 }5 h; S& {! s" ~+ o
316. [PID: 2540 / Administrator][F:\AutoGuarder.exe]  [任软工作室, 2.2.5.201]
     ( V* x9 \8 b9 n& N$ f6 b! J
317.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
318.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     ; @  T0 d1 X0 w% M# l( v$ U
319.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
320.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     & N: G# P+ m; m
321. [PID: 2476 / Administrator][d:\我的文档\桌面\系统检测修复\SREngPS.EXE]  [Smallfrogs Studio, 2.5.16.900]
     ) y! v: Z) Y7 t) ?
322.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
323.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     + Y9 K! C" ^% G" z1 U% I7 I3 s
324.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
325.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
326.     [d:\我的文档\桌面\系统检测修复\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]
     
327. ==================================
     1 o6 W2 x+ V# Q  z" y
328. 文件关联
     
329. .TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
     ( h* K: p9 q) B5 m1 z( Y: r& B
330. .EXE  OK. ["%1" %*]
     
331. .COM  OK. ["%1" %*]
     
332. .PIF  OK. ["%1" %*]
     
333. .REG  OK. [regedit.exe "%1"]
     
334. .BAT  OK. ["%1" %*]
     2 k$ f. D: T( {" G. w6 s8 w
335. .SCR  OK. ["%1" /S]
     2 A  S1 E) |5 i* Q" T6 q
336. .CHM  OK. ["C:\WINDOWS\hh.exe" %1]
     
337. .HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
     
338. .INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
     
339. .INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
     8 O. }9 z3 v% G7 R
340. .VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
     9 T  S# E* r& d
341. .JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
     , d' m, q8 w* x: ?# z4 ]
342. .LNK  OK. [{00021401-0000-0000-C000-000000000046}]
     
343. ==================================
     ; h& p! @4 y/ S6 k1 |
344. Winsock 提供者
     8 Z# [# t' f( R9 H, b
345. N/A
     
346. ==================================
     
347. Autorun.inf
     
348. N/A
     ) a1 B# U, Y% q
349. ==================================
     # o: n0 n$ j- i& a0 z
350. HOSTS 文件
     
351. N/A
     ! Y; U" W4 U% `" a+ A- B
352. ==================================
     
353. 进程特权扫描
     
354. 特殊特权被允许： SeLoadDriverPrivilege [PID = 520, C:\WINDOWS\SYSTEM32\WINLOGON.EXE]
     0 P; i* h; [# x$ ?
355. 特殊特权被允许： SeDebugPrivilege [PID = 928, F:\ARVMON.EXE]
     ) D! x4 m* _# c( O
356. 特殊特权被允许： SeLoadDriverPrivilege [PID = 928, F:\ARVMON.EXE]
     
357. 特殊特权被允许： SeDebugPrivilege [PID = 2540, F:\AUTOGUARDER.EXE]
     . N8 J2 B" r5 @. A* a! g4 E
358. 特殊特权被允许： SeLoadDriverPrivilege [PID = 2540, F:\AUTOGUARDER.EXE]
     
359. ==================================
     
360. API HOOK
     ! v2 X4 J9 o* I$ I
361. N/A
     : G% K- h4 a5 z. s* _0 x: B
362. ==================================
     # c; T) `4 o. \/ P3 o
363. 隐藏进程
     6 o/ D8 K' F' }& H
364. N/A
     
365. ==================================
     : V5 c3 q# ~7 N# R
366. 
     # T8 c8 g9 O; K3 T: `& x1 H) V9 l

复制代码

傲天♂扬帆

跟原始说了，不知道能不能看明白。。。

傲天♂元始

[Start]
' Q% }; p- K" X$ N' W$ _8 \
1 a5 |# F# E2 O2 F, X$ L) l8 _& f* X2008-05-22,22:24:21
& O! O1 ~; w8 J. J3 H
2 N' c( f8 M; F! x0 n1 D) y8 h# PSREngLOG智能分析专家 V1.2.0.125
4 p) y1 `2 I1 h. jTored (http://hi.baidu.com/peaset)
# {# [/ y& ~4 j5 z
======================================================
& z- V; ^6 ?; n以下过程将用到SREng、PowerRmv，如果您不熟悉这两款工具的使用方法，请参考下列链接：
5 ~. k) Q9 U% t  h, w& \SREng详细操作方法： http://hi.baidu.com/peaset/blog/ ... dd19224e4aeadf.html
PowerRmv详细操作方法： http://hi.baidu.com/peaset/blog/ ... 6fb5eb77c63816.html
======================================================
7 R( R6 d/ S% i0 ]
, l. `' b- R& ^4 P( [以下是病毒清除步骤：

% y. k( A: l3 A8 P, ?1、用PowerRmv删除以下文件(没有则跳过)：

; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
;
6 x* p3 F" B. R, o5 K; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
C:\WINDOWS\System32\3wareSrv.exe
\SystemRoot\C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll
$ H$ Q0 i9 U; R1 F' K: u
/ P  Z2 o3 s! W# t, z9 P\SystemRoot\System32\DRIVERS\22jn.sys
, ^& X- d! g5 C* ^- m\SystemRoot\System32\DRIVERS\43ecu.sys
3 y  w* u2 d' ]. ]\??\C:\Documents and Settings\All Users\Application Data\Microsoft\Office\SYSTEM\ntptdb.sys
; p: o! y. T. ?: _\SystemRoot\system32\drivers\pnduojtwbt.sys
. e# q( ]8 k1 E! T\SystemRoot\system32\drivers\RsBoot.sys
system32\DRIVERS\sr.sys
\SystemRoot\system32\drivers\unzxzsrs.sys
* L7 F, `4 r4 G3 ?" w" b1 ~\SystemRoot\system32\DRIVERS\ViBus.sys
% \1 [" ?6 B7 A; I\SystemRoot\system32\drivers\zhibmaso.sys
2 U* y3 ^$ e; y: y' S
2、用SREng删除以下【注册表】项(没有则跳过)：

<IMJPMIG8.1>
<PHIME2002A>
<PHIME2002ASync>

7 i" ~1 l& R) W$ D9 ~) l- w3、用SREng删除【所有启动文件夹】内容(没有则跳过)
: m9 G# Q3 o* w# i) b
4、用SREng删除以下【服务】项(没有则跳过)：

[3ware Controller Service / 3wareSrv]
+ V4 T4 @8 D' D/ W7 @* n- W4 o[NetMeeting Remote Desktop Sharing / mnmsrvc]
  u& a5 {- R- H, Q5 S& y$ Z% `1 j
5、用SREng删除以下【驱动程序】项(没有则跳过)：

1 p  @# m# m4 I  |* X' ^1 z5 C) _[22j / 22jn]
* N, K' d6 ]- N% w( r7 k[43ec / 43ecu]
[ntptdb / ntptdb]
5 h3 I/ B7 E4 M1 P4 s% ^, T' |1 q[pnduojtwbt / pnduojtwbt]
( A; d& z( D6 B: B[RsAntiSpyware / RsAntiSpyware]
% E, `% I/ Z2 C/ G[System Restore Filter Driver / sr]
3 o' v$ _) w3 v5 _5 _[System Services / unzxzsrs]
[ViBus / ViBus]
[ATI Extend / zhibmaso]
: r9 a/ e% d. _/ E* Q5 g- j; z4 n
6、用SREng删除以下【浏览器加载项】项(没有则跳过)：

3 G+ u  l5 Z7 ]' x" b' C$ q  y0 p4 }[Zcom 杂志]
[Browser Enhanced Objects]
" I7 d. i. I% ?
最后,重新启动计算机.Tored祝您好运!
! L& `% k2 p& Y! h  p======================================================
  E  w' I+ A. O[End]

傲天♂元始

你就这样弄，不行我也没办法

傲天♂扬帆

独恋有按原始说的重新操作一次吗？

独恋伊影

找不到要删的文件。。。。

傲天♂元始

有些都是隐藏起来的

傲天♂风云

我对代码 一点都不懂

傲天♂元始

。。。这不是代码只是系统的扫描日志而已

傲天♂冷漠

我汗~~~
( _+ {5 k+ q% b: R7 g' f8 t这么多代码~~~