在这里

独恋伊影

1. 
   
2. 2008-05-22,20:37:43
   
3. System Repair Engineer 2.5.16.900
   . U# P" X' v* L5 v
4. Smallfrogs (http://www.KZTechs.com)
   
5. Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能
   
6. 以下内容被选中：
   0 J  C5 |6 B: f/ E! `* L7 V" u
7.     所有的启动项目（包括注册表、启动文件夹、服务等）
   
8.     浏览器加载项
   
9.     正在运行的进程（包括进程模块信息）
   " e' v, B( ~# `8 `6 @
10.     文件关联
    
11.     Winsock 提供者
    % E3 ?: N, _( W5 v3 O
12.     Autorun.inf
    
13.     HOSTS 文件
    
14.     进程特权扫描
    # c- X6 l% z) H# h
15. 
    $ z1 B; Z$ f0 e$ e. Z6 d$ P
16. 启动项目
    
17. 注册表
    
18. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    , t, z& V$ M5 f% l7 V
19.     <ctfmon.exe><C:\WINDOWS\system32\CTFMON.EXE>  [(Verified)Microsoft Windows Publisher]
    " L. T7 g& D( ~& j+ m* {
20. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    
21.     <360Safebox><"C:\Program Files\360Safebox\safeboxTray.exe" /r>  [(Verified)Qizhi Software (beijing) Co. Ltd]
    - I: e0 i, E& k0 `
22.     <360Safetray><C:\Program Files\360safe\safemon\360tray.exe /start>  [(Verified)Qizhi Software (beijing) Co. Ltd]
    3 J) H: t* t2 x. j5 M
23.     <360Antiarp><C:\Program Files\360safe\AntiArp\AntiArp.exe /start>  [(Verified)Qizhi Software (beijing) Co. Ltd]
    5 s% T# d/ r0 C! v! b" q
24.     <KavStart><"C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KAVStart.exe" -startup>  [(Verified)KINGSOFT CORPORATION]
    ! t' V# \" S' O
25.     <IMJPMIG8.1><; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32>  [N/A]
    3 c3 z9 s$ h( c2 W1 c/ ]' @: a
26.     <PHIME2002A><; >  [N/A]
    
27.     <PHIME2002ASync><; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32>  [N/A]
    
28. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    
29.     <shell><Explorer.exe>  [(Verified)Microsoft Windows Component Publisher]
    
30.     <Userinit><C:\WINDOWS\system32\UserInit.exe,>  [(Verified)Microsoft Windows Publisher]
    ! q6 C  P, K& y2 [0 r1 Z9 ?
31.     <UIHost><logonui.exe>  [(Verified)Microsoft Windows Publisher]
    
32. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
      ]  ^. e/ a  S: _2 f
33.     <{AC2DC2EF-5165-40A3-8CDF-41DCA1B0901A}><C:\WINDOWS\system32\shlhook.dll>  [Beijing Rising Technology Co., Ltd.]
    
34. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
    & }$ s+ W: |5 A
35.     <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE>  [N/A]
    6 d8 E- |% c, H7 L; ^1 ^& I
36. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
    
37.     <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [N/A]
    
38. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
    
39.     <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [N/A]
    
40. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
    
41.     <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [N/A]
    
42. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
    # _$ M2 Z9 l+ d
43.     <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Remove.PerUser.NT>  [(Verified)Microsoft Windows Publisher]
    ; v& Y* h2 j2 p- O8 j0 S
44. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
    2 Q5 t+ r, A, D, [2 O) \) E
45.     <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser>  [(Verified)Microsoft Windows Publisher]
    1 u$ |. L( n7 b( I, J
46. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
    % q! _- I' Z- E9 Z
47.     <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp10.inf,PerUserStub>  [(Verified)Microsoft Windows Publisher]
    
48. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
    
49.     <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [N/A]
    8 c1 l+ i& T+ s( f
50. ==================================
    5 e* L6 j5 u  O. Y# I+ d4 ~5 j' R( c5 v
51. 启动文件夹
      y' ~  O1 j! o, F' v1 f
52. N/A
    
53. ==================================
    2 A- t1 q( R: X2 o7 R
54. 服务
    
55. [3ware Controller Service / 3wareSrv][Stopped/Auto Start]
    
56.   <C:\WINDOWS\System32\3wareSrv.exe><N/A>
    5 |' M3 u& J# d/ I
57. [Google Updater Service / gusvc][Stopped/Manual Start]
      h( a4 ]) c9 E! n! S
58.   <"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"><Google>
    - f) j5 a! z  B6 z1 S' Q
59. [Help and Support / helpsvc][Stopped/Disabled]
    
60.   <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll><N/A>
    
61. [Human Interface Device Access / HidServ][Stopped/Boot Start]
    
62.   <\SystemRoot\C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
    3 ]4 m. D+ S3 p8 w/ w  u. I3 {8 q
63. [Kingsoft Internet Security Common Service / KISSvc][Stopped/Auto Start]
    
64.   <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KISSvc.EXE><Kingsoft Corporation>
    7 r4 N0 M4 x4 ]0 r; V% i
65. [Kingsoft Personal Firewall Service / KPfwSvc][Running/Auto Start]
    
66.   <"C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KPfwSvc.EXE"><Kingsoft Corporation>
    1 {/ v) D; C0 r/ o0 z. _, v$ p
67. [Kingsoft Antivirus KWatch Service / KWatchSvc][Running/Auto Start]
    ; {2 B2 o. ^# w8 b& J
68.   <"C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KWatch.EXE"><Kingsoft Corporation>
    & t4 \0 y$ C/ P: q1 q# I/ \6 J
69. [NetMeeting Remote Desktop Sharing / mnmsrvc][Stopped/Manual Start]
    
70.   <><N/A>
    9 b, y( v% S- o6 j# O
71. [Qvod Terminal / Qvod Terminal][Running/Auto Start]
    5 x* x, R6 C! }% _! L9 `
72.   <C:\Program Files\QvodPlayer\QvodTerminal.exe><Shenzhen QVOD Technology Co.,Ltd>
    
73. ==================================
    & X) r. N7 x3 N3 d. z
74. 驱动程序
    1 @& `3 P3 u9 Y
75. [22j / 22jn][Stopped/Boot Start]
    + ~1 _" A5 B7 W: J7 u  Y' m
76.   <\SystemRoot\System32\DRIVERS\22jn.sys><N/A>
    1 Z& r6 t' d- r- t
77. [360AntiArp / 360AntiArp][Running/System Start]
    
78.   <\??\C:\WINDOWS\system32\drivers\360AntiArp.sys><360安全中心>
    $ c; L! S+ C/ T
79. [43ec / 43ecu][Stopped/Boot Start]
    & f  Q# b+ N6 F/ x# F9 A. ]) U3 o
80.   <\SystemRoot\System32\DRIVERS\43ecu.sys><N/A>
    . f' R- V4 ~; B+ _8 @* p0 n6 h4 B6 P! d
81. [Intel(r) 82801 Audio Driver Install Service (WDM) / ac97intc][Running/Manual Start]
    
82.   <system32\drivers\ac97intc.sys><Intel Corporation>
    ! \+ h: k5 g& S  g( ?! _
83. [Promise driver accelerator / bb-run][Running/Boot Start]
    
84.   <\SystemRoot\system32\DRIVERS\bb-run.sys><Promise Technology, Inc.>
    # A& ?$ w3 r3 I( W* N; f) U6 ?
85. [Promise Removable Disk Control Driver / dontgo][Running/Boot Start]
    
86.   <\SystemRoot\system32\DRIVERS\DontGo.sys><Promise Technology, Inc.>
    ) R0 v1 E( \+ j+ O7 ], O  J
87. [KAVBase / KAVBase][Running/Auto Start]
    ) v) C8 N9 @9 D( ^* |7 @
88.   <\??\C:\WINDOWS\system32\Drivers\KAVBase.sys><Kingsoft Corporation>
    
89. [KAVBootC / KAVBootC][Running/Boot Start]
    
90.   <\SystemRoot\system32\Drivers\KAVBootC.sys><Kingsoft Corporation>
    
91. [KAVSafe / KAVSafe][Running/Auto Start]
    ( d! _# ]8 R! H! R$ x7 |
92.   <\??\C:\WINDOWS\system32\Drivers\KAVSafe.sys><Kingsoft Corporation>
    * R% ]/ u1 k* Z6 h7 k2 ]: z4 h1 V
93. [KNetWch / KNetWch][Running/System Start]
    ' w* C* u* g# c8 i2 J; q0 ?
94.   <\??\C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KNetWch.SYS><Kingsoft Corporation>
    
95. [KWatch3 / KWatch3][Running/Auto Start]
    8 J* f' I- J4 m. H
96.   <\??\C:\WINDOWS\system32\drivers\KWatch3.SYS><Kingsoft Corporation>
    
97. [ntptdb / ntptdb][Stopped/Auto Start]
    
98.   <\??\C:\Documents and Settings\All Users\Application Data\Microsoft\Office\SYSTEM\ntptdb.sys><N/A>
    
99. [nv / nv][Running/Manual Start]
    
100.   <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
     + A' \- o9 o: k8 w; X# ^
101. [NVIDIA nForce RAID Driver / nvrd32][Running/Boot Start]
     
102.   <\SystemRoot\system32\DRIVERS\nvrd32.sys><NVIDIA Corporation>
     
103. [DDK PACKET Protocol / Packet][Running/Manual Start]
     , f/ V- [4 M" z  e4 l" `
104.   <system32\DRIVERS\ProtoDrv.sys><360安全中心>
     # U6 n# p2 S/ e9 b$ d2 k
105. [pnduojtwbt / pnduojtwbt][Stopped/Boot Start]
     5 C0 j; ]% w  \# j6 [3 b( g+ _/ ?  S
106.   <\SystemRoot\system32\drivers\pnduojtwbt.sys><N/A>
     , o" A3 @; }2 M# G5 i' |! x) ~
107. [Direct Parallel Link Driver / Ptilink][Running/Manual Start]
     
108.   <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
     
109. [RsAntiSpyware / RsAntiSpyware][Stopped/Boot Start]
     , X3 j/ y2 ~) Y0 B# Y
110.   <\SystemRoot\system32\drivers\RsBoot.sys><N/A>
     ( D/ K% s/ Y  z. v2 l
111. [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start]
     . _% J; d" i  j% D8 B
112.   <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
     + a8 y5 a, b1 c/ @
113. [SafeBoxKrnl / SafeBoxKrnl][Running/System Start]
     6 P- |2 l* E4 p0 L
114.   <\??\C:\Program Files\360Safebox\SafeBoxKrnl.sys><360安全中心>
     
115. [Secdrv / Secdrv][Stopped/Manual Start]
     % N* h  `! q0 n% g$ i6 k
116.   <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
     4 Z% i; I( I- m  W( V
117. [SATALink External Device Filter / SiRemFil][Running/Boot Start]
     3 ~3 t# |* s3 Q  C/ j
118.   <\SystemRoot\system32\DRIVERS\SiRemFil.sys><Silicon Image, Inc.>
     $ J* D0 x' M: g" x# m  D- y
119. [System Restore Filter Driver / sr][Stopped/Disabled]
     
120.   <system32\DRIVERS\sr.sys><N/A>
     
121. [TesSafe / TesSafe][Stopped/Manual Start]
     & {7 ?" U; `+ Y8 s
122.   <\??\C:\WINDOWS\system32\TesSafe.sys><TENCENT>
     6 \  J# ~# M  [/ \
123. [System Services / unzxzsrs][Stopped/Boot Start]
     ! u! O; ^2 h  c& A6 B0 V
124.   <\SystemRoot\system32\drivers\unzxzsrs.sys><N/A>
     
125. [ViBus / ViBus][Stopped/Boot Start]
     / I4 f9 c6 Y4 ]  B. P! }' t7 I/ m
126.   <\SystemRoot\system32\DRIVERS\ViBus.sys><N/A>
     ( T( H8 K$ Q" j1 K7 Q% y+ B
127. [World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start]
     
128.   <system32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>
     # L4 u2 c# Y. Q
129. [VIA SATA IDE Hot-plug Driver / xfilt][Running/Boot Start]
     5 K5 L3 Z# t/ E4 \1 v  C
130.   <\SystemRoot\system32\DRIVERS\xfilt.sys><VIA Technologies,Inc>
     
131. [ATI Extend / zhibmaso][Stopped/Boot Start]
       T5 H; s* i" C- X! a1 z1 G" ]
132.   <\SystemRoot\system32\drivers\zhibmaso.sys><N/A>
     
133. [Vimicro USB PC Camera (ZC0301PL) / ZSMC301b][Running/Manual Start]
     ' `) k. I9 v# B+ `
134.   <System32\Drivers\usbVM31b.sys><Vimicro Corporation>
     
135. ==================================
     
136. 浏览器加载项
       M' i: u4 |; T3 b/ [
137. [Google Toolbar Helper]
     / \1 [0 c* p7 m& t
138.   {AA58ED58-01DD-4d91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     
139. [Google Toolbar Notifier BHO]
     
140.   {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll, Google Inc.>
     
141. [SafeMon Class]
     & I8 ]' o$ {1 t' ~; X: M& d
142.   {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, 360.CN>
     ' O0 x  e" \3 J; n
143. [kingsoft browser shield]
     4 w5 H& R% y' ^! M0 K6 q
144.   {D963BE1A-6B35-47DB-B002-49FAE71D85CC} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KASBrowserShield.DLL, Kingsoft Corporation>
     
145. [IEBuddyExtControl Class]
     3 s& i/ w! X) H0 L3 [" m
146.   {3AECD3C1-7085-4731-96DC-47B6CF7EF749} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddyExt.DLL, Kingsoft Corporation>
     : l7 f* b/ O4 W
147. [Zcom 杂志]
     ' s% a9 h( F8 C
148.   {4045D313-1D5E-4fe4-93A0-A34630B6A00B} <C:\Zcom\E-Space.exe, N/A>
     
149. [&Google]
     
150.   {2318C2B1-4965-11d4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     7 a7 ]) B% q3 u. H% b8 u" Y0 _
151. [KooPlayer Control]
     
152.   {C728DAB8-FDF5-4CD7-89DD-879D25794C77} <C:\WINDOWS\system32\CCTVKO~1.OCX, Koos>
     
153. [Shockwave Flash Object]
     
154.   {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx, Adobe Systems, Inc.>
     # W3 F. k6 V- Z
155. [KUpdateObj2 Class]
     
156.   {D82303B7-A754-4DCB-8AFC-8CF99435AACE} <C:\WINDOWS\system32\KingSoft\KOS\UpdateOcx2.dll, Kingsoft Corporation>
     * N: c4 x0 s; Z. x
157. [Google Script Object]
     " F' c1 s5 u. o# w, ~( P/ U
158.   {00EF2092-6AC5-47C0-BD25-CF2D5D657FEB} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     
159. [EWA Control]
     
160.   {18226BF8-DC0B-4D81-80E9-A41AE37BB73A} <C:\PROGRA~1\PPLive\SYNACA~2.OCX, Synacast>
     
161. [Windows Media Player]
     , {) g; i9 l: h# f9 V7 v
162.   {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\msdxm.ocx, Microsoft Corporation>
     
163. [&Google]
     1 J2 o9 g0 a* A/ c$ J- \
164.   {2318C2B1-4965-11D4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     
165. [HTML Document]
     
166.   {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
     " H( M8 ^& r* Q4 t/ U
167. [DHTML Edit Control Safe for Scripting for IE5]
     
168.   {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, Microsoft Corporation>
     ' f* f/ \& H! _% p7 J& J
169. [RealPlayer RAM Download Handler]
     - P: g4 R5 ~, P& D+ _: k
170.   {2F542A2E-EDC9-4BF7-8CB1-87C9919F7F93} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
     7 c& O8 A- d& i/ R
171. [IEBuddyExtControl Class]
     
172.   {3AECD3C1-7085-4731-96DC-47B6CF7EF749} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddyExt.DLL, Kingsoft Corporation>
     
173. [XML Document]
     
174.   {48123BC4-99D9-11D1-A6B3-00C04FD91555} <C:\WINDOWS\system32\msxml3.dll, Microsoft Corporation>
     ! Y6 T& l3 {% ~. b0 x: V
175. [HHCtrl Object]
       ^6 M" `* p; T: ]' A/ R
176.   {52A2AAAE-085D-4187-97EA-8C30DB990436} <C:\WINDOWS\system32\hhctrl.ocx, Microsoft Corporation>
     
177. [Windows Media Player]
     
178.   {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     
179. [Active Desktop Mover]
     
180.   {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A>
     
181. [360SafeLive]
     & S5 N5 [$ i( B0 S+ ?
182.   {87515F61-A66C-4319-A0E0-D416CB8059E3} <C:\Program Files\360safe\live.dll, 360.cn>
     
183. [Microsoft Web 浏览器]
     ) j( A$ F7 Y4 u/ O3 C
184.   {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
     + E1 }' H$ b# N) Q, [
185. [Browser Enhanced Objects]
     0 d! }8 B* {* }: W
186.   {986488AF-13D5-9DDF-4FEF-9FB88698CFC1} <C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\USERDATA\webbrowser_2011.dll, N/A>
     & Z( K; _9 |& h
187. [Google Toolbar Helper]
     
188.   {AA58ED58-01DD-4D91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     + K, s. n/ ?& J" k
189. [Microsoft Scriptlet Component]
     
190.   {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation>
     ) R  @) X8 r( {8 D# p1 L
191. [Google Toolbar Notifier BHO]
     
192.   {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll, Google Inc.>
     ' K% Q( C. z7 o. U
193. [SearchAssistantOC]
     
194.   {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
     
195. [SafeMon Class]
     
196.   {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, 360.CN>
     
197. [RDS.DataSpace]
     9 a; I: I& B$ `8 ?" c& b5 e
198.   {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
     - P: j+ z5 F3 p8 ^  d5 M: I( S
199. [KooPlayer Control]
     6 [9 p  e& ^0 W6 a, s; t
200.   {C728DAB8-FDF5-4CD7-89DD-879D25794C77} <C:\WINDOWS\system32\CCTVKO~1.OCX, Koos>
     ) ?9 Z8 M5 I% z1 W+ u4 f
201. [AUDIO__MID Moniker Class]
     0 V2 `, w  q$ Q7 v5 e% W) q& U
202.   {CD3AFA74-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     2 E/ m9 i: @4 a. H  L4 I9 E7 s
203. [AUDIO__MP3 Moniker Class]
     % B9 e" A' N# K0 X+ n- P
204.   {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     7 ~: W/ V, d4 ]) ^8 m' U
205. [AUDIO__X_MS_WMA Moniker Class]
     
206.   {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     
207. [VIDEO__X_MS_WMV Moniker Class]
     
208.   {CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     
209. [RealPlayer G2 Control]
     
210.   {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
     
211. [Shockwave Flash Object]
     9 A2 H* S! L# l& L- C% Q7 C5 N
212.   {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx, Adobe Systems, Inc.>
     
213. [KUpdateObj2 Class]
     8 o" v1 {. B) s3 R+ x$ h- I* }7 M
214.   {D82303B7-A754-4DCB-8AFC-8CF99435AACE} <C:\WINDOWS\system32\KingSoft\KOS\UpdateOcx2.dll, Kingsoft Corporation>
     
215. [kingsoft browser shield]
     
216.   {D963BE1A-6B35-47DB-B002-49FAE71D85CC} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KASBrowserShield.DLL, Kingsoft Corporation>
     
217. [PasswordEditCtrl Class]
     ! V# h" z) x* k! k. B; X- a
218.   {E787FD25-8D7C-4693-AE67-9406BC6E22DF} <C:\WINDOWS\system32\qqedit\qqedit.dll, 腾讯科技（深圳）有限公司>
     5 V" z. L' d3 o0 V
219. [QvodCtrl Class]
     & j& i3 F+ g; C$ P% T0 |" c4 i
220.   {F3D0D36F-23F8-4682-A195-74C92B03D4AF} <C:\Program Files\QvodPlayer\QvodInsert.dll, Shenzhen QVOD Technology Co.,Ltd>
     
221. [&使用超级旋风下载]
     7 ?' j, R: Z2 s: D5 c# D
222.   <C:\Program Files\Tencent\QQDownload\geturl.htm, N/A>
     . I: z% x* r+ d9 `9 j
223. [&使用超级旋风下载全部链接]
     ! r* ~. D: q- Z3 }3 r
224.   <C:\Program Files\Tencent\QQDownload\getAllurl.htm, N/A>
       S1 T/ b1 ]; ^# }9 w. o7 P" Z
225. [使用迅雷下载]
     
226.   <, N/A>
     3 [# O3 Y6 q3 t
227. [使用迅雷下载全部链接]
     / h- t* q1 m' Y0 r3 h0 J7 q3 l* m
228.   <, N/A>
     + m" {3 }9 s! C) U! i5 e
229. [导出到 Microsoft Office Excel(&X)]
     
230.   <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
     
231. [添加到QQ表情]
     * f# S- l0 F4 }; G6 }& d
232.   <C:\Program Files\Tencent\QQ\AddEmotion.htm, N/A>
     
233. ==================================
     
234. 正在运行的进程
     % `* t+ d' B" o$ m2 n
235. [PID: 444 / SYSTEM][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
236. [PID: 496 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     * `/ H; P7 G, p; ]/ V0 q2 Y
237. [PID: 520 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
238.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
       L- c. K. k8 M6 z  M
239. [PID: 564 / SYSTEM][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
240. [PID: 576 / SYSTEM][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     " g, t) \7 l( w' j% m" M
241. [PID: 720 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
242. [PID: 780 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
243. [PID: 856 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
244. [PID: 944 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     1 B9 T  K. C. R, z- c2 \# A' ~
245. [PID: 1012 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
246. [PID: 1236 / Administrator][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_qfe.070613-1311)]
     
247.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
248.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
249.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
     6 }! T$ D1 H* ^1 A7 W9 q
250.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     6 |8 {1 R( q4 |; t! A. A, m1 E
251.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KAVEXT.DLL]  [Kingsoft Corporation, 2008,05,07,373]
     " S7 ]5 W& r2 P* y# x0 S- o# Q
252.     [C:\Program Files\Tencent\QQ\qdshm.dll]  [, 1, 0, 101, 20]
     
253.     [C:\Program Files\Tencent\QQ\MFC42.DLL]  [Microsoft Corporation, 6.00.8665.0]
     : t  [5 n, U* x7 N+ b* ]
254.     [C:\Program Files\WinRAR\rarext.dll]  [N/A, ]
     
255.     [C:\WINDOWS\system32\shlhook.dll]  [Beijing Rising Technology Co., Ltd., 4.0.0.9]
     
256.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
257.     [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
     + Y" a0 m1 @* z
258. [PID: 1332 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
     - ?8 l6 C/ C, l* S) U" c" i
259.     [C:\WINDOWS\system32\mdimon.dll]  [Microsoft Corporation, 11.3.8166.2]
     
260.     [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll]  [Microsoft Corporation, 11.3.8166.2]
     
261. [PID: 1540 / Administrator][C:\Program Files\360safe\AntiArp\AntiArp.exe]  [360安全中心, 2, 0, 0, 1008]
     8 C+ ~1 N9 P0 t& f, @( v
262.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     8 \8 Q7 R& p: f3 L) n
263.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
264.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     7 A2 R  x6 x+ M3 l8 ]" q# p
265.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     4 O/ N( l5 J, a7 s+ P! G
266. [PID: 1560 / Administrator][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     9 \3 e% F4 A7 e  l8 m2 ^( f
267.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
268.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     ' h; k  H# Y, t  u" N3 r8 }. ~
269.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     8 i4 R3 _# s9 ]3 Q6 L
270. [PID: 1576 / Administrator][C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe]  [Google Inc., 2, 0, 301, 1654]
     1 l% M- M. M( M% H# z- B% A
271.     [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\gtn.dll]  [Google Inc., 2, 0, 301, 7164]
     
272.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
273.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     6 z% D; ^4 ^+ q9 N4 q) |1 f8 O
274.     [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\res_zh-CN.dll]  [Google Inc., 2, 0, 301, 7164]
     
275.     [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll]  [Google Inc., 2, 0, 301, 7164]
     
276.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     4 k) @/ i; X0 R3 X8 u
277.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
       i' \# G% F, q1 K& L& ~
278. [PID: 1648 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
279. [PID: 1744 / SYSTEM][C:\Program Files\QvodPlayer\QvodTerminal.exe]  [Shenzhen QVOD Technology Co.,Ltd, 2, 5, 0, 53]
     
280. [PID: 1860 / SYSTEM][C:\WINDOWS\system32\skeys.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     2 L* u2 T+ l7 Y3 r; A% |) K
281. [PID: 1908 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
282. [PID: 1964 / LOCAL SERVICE][C:\WINDOWS\system32\wdfmgr.exe]  [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
     
283. [PID: 2772 / Administrator][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
     
284.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
285.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     0 J+ Q  |" A( D3 B( [) ~  V
286.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
287.     [c:\program files\google\googletoolbar2.dll]  [Google Inc., 4, 0, 1606, 6690]
     
288.     [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll]  [Google Inc., 2, 0, 301, 7164]
     
289.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KASBrowserShield.DLL]  [Kingsoft Corporation, 2008,04,15,2]
     5 ^! \8 {8 G! J$ G2 v, b; N% T
290.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddy.dll]  [Kingsoft Corporation, 2008,04,15,2]
     
291.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddyExt.DLL]  [Kingsoft Corporation, 2008,05,14,83]
     " R+ F" w' Q! I6 R" ?- p$ y
292.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KANTray.dll]  [Kingsoft Corporation, 2008,04,15,2]
     * C3 t+ V( o) L+ y# ]
293.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KAVAFish.DLL]  [Kingsoft Corporation, 2008,05,13,78]
     ; `$ M7 M4 _2 A
294.     [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
     1 a" W* z% Z# H9 I% D
295.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
     
296.     [C:\WINDOWS\system32\WN.IME]  [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
     
297.     [C:\Program Files\ShiQiang\wnime\Dll32\wnpy_StatusWnd.dll]  [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
     
298.     [C:\Program Files\ShiQiang\wnime\Dll32\wnpy_CompWnd.dll]  [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
       N/ m. ]: F7 l1 E8 E; P& H
299.     [C:\Program Files\ShiQiang\wnime\Dll32\wnpy_Query.dll]  [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
     
300.     [C:\WINDOWS\system32\SOGOUPY.IME]  [Sogou.com Inc., 3.2.0.0]
     
301.     [C:\Documents and Settings\Administrator\My Documents\SogouInput\Plugin\SgImeWord.dll]  [Sogou.com Inc., 3.2.0.0]
     
302.     [C:\WINDOWS\system32\WINWB98.IME]  [Microsoft Corporation, 4.00.950]
     
303.     [C:\WINDOWS\system32\WINWB86.IME]  [Microsoft Corporation, 4.00.950]
     8 D# X! i5 G: i* C' o7 X
304.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
305. [PID: 1124 / Administrator][C:\Program Files\Tencent\QQ\TXPlatform.exe]  [Tencent, 1, 0, 170, 0]
     
306.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
307.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
308.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     ' P/ s5 q9 \) L
309.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
310. [PID: 928 / Administrator][F:\arvmon.exe]  [任软工作室, 2.2.5.201]
     4 M+ u: E1 M! A% ?4 M- h0 @
311.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
312.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     3 _: ~7 w' [9 N3 F' D4 `( a6 Y
313.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
314.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     6 Y  v* N2 h* {
315.     [F:\Vdata.dll]  [任软工作室, 2, 2, 1, 94]
     3 L, c* [& l. q: }& t, y
316. [PID: 2540 / Administrator][F:\AutoGuarder.exe]  [任软工作室, 2.2.5.201]
     & r; o6 O( J' H6 z6 j3 W! v. [
317.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
318.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
319.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     ; }6 l6 E9 Q  Y3 J2 c
320.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
321. [PID: 2476 / Administrator][d:\我的文档\桌面\系统检测修复\SREngPS.EXE]  [Smallfrogs Studio, 2.5.16.900]
     ' c' ]4 Y; v, J, x: D; g! V
322.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
323.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     ; h1 |) e! c* M0 E: T
324.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
325.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
326.     [d:\我的文档\桌面\系统检测修复\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]
     
327. ==================================
     
328. 文件关联
     8 ], p- S; b; A+ ^2 ^- q$ @
329. .TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
     - L  p5 Y8 M% t, ]8 w
330. .EXE  OK. ["%1" %*]
     + c! F2 Z: C; ~! @& Q- g
331. .COM  OK. ["%1" %*]
     
332. .PIF  OK. ["%1" %*]
     
333. .REG  OK. [regedit.exe "%1"]
     : W( B7 ^+ A2 R. ^7 I: z
334. .BAT  OK. ["%1" %*]
     1 z5 l5 o9 p' ]/ ?# o1 {" C
335. .SCR  OK. ["%1" /S]
     
336. .CHM  OK. ["C:\WINDOWS\hh.exe" %1]
     
337. .HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
     
338. .INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
     / G2 a! Q$ ^/ [
339. .INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
     + a8 S& t8 `* c! G2 s: L
340. .VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
     . r# }$ p2 d, @$ U. E# z
341. .JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
     
342. .LNK  OK. [{00021401-0000-0000-C000-000000000046}]
     6 L1 w6 P! a$ P3 Y
343. ==================================
     
344. Winsock 提供者
     
345. N/A
     
346. ==================================
     : a, B2 s6 m* V4 j
347. Autorun.inf
     & @- l, z# r& j6 D* G1 |6 S6 b, a7 t
348. N/A
     / W; W. z) v% W% n0 y. R- {
349. ==================================
     
350. HOSTS 文件
     ! J7 ?  {( Q- m% f: K( p$ Q
351. N/A
     
352. ==================================
     % b: J/ l7 D/ i4 o% }' O$ L
353. 进程特权扫描
     
354. 特殊特权被允许： SeLoadDriverPrivilege [PID = 520, C:\WINDOWS\SYSTEM32\WINLOGON.EXE]
     , U! p8 D1 Z9 g( c, Z% y# R
355. 特殊特权被允许： SeDebugPrivilege [PID = 928, F:\ARVMON.EXE]
     - a1 q# k3 s* s9 i; d) v2 k: N
356. 特殊特权被允许： SeLoadDriverPrivilege [PID = 928, F:\ARVMON.EXE]
     - l& m9 @, Y# r
357. 特殊特权被允许： SeDebugPrivilege [PID = 2540, F:\AUTOGUARDER.EXE]
     
358. 特殊特权被允许： SeLoadDriverPrivilege [PID = 2540, F:\AUTOGUARDER.EXE]
     4 G4 b$ A) z7 g7 t, z6 n
359. ==================================
     6 l. b: S  L8 b5 x0 F
360. API HOOK
     
361. N/A
     4 Y0 ]9 Y% E1 ^! G
362. ==================================
     & q  t3 \' \3 M7 ~/ J* M7 a( }  W
363. 隐藏进程
     
364. N/A
     ! [+ l( ~6 R7 n
365. ==================================
     2 M' T' ?- }+ h8 y
366. 
     - H( w% a  L7 l

复制代码

傲天♂扬帆

跟原始说了，不知道能不能看明白。。。

傲天♂元始

[Start]

2008-05-22,22:24:21

SREngLOG智能分析专家 V1.2.0.125
Tored (http://hi.baidu.com/peaset)

0 R- u& {$ P- {, ^0 }1 Q+ G8 ~======================================================
以下过程将用到SREng、PowerRmv，如果您不熟悉这两款工具的使用方法，请参考下列链接：
* X) _% l, N4 m* C& A5 Y$ iSREng详细操作方法： http://hi.baidu.com/peaset/blog/ ... dd19224e4aeadf.html
PowerRmv详细操作方法： http://hi.baidu.com/peaset/blog/ ... 6fb5eb77c63816.html
' `1 Z4 x4 O" A======================================================

* z# ~3 P/ ~: {以下是病毒清除步骤：
( G2 x4 q, W- h' }7 }3 r
1、用PowerRmv删除以下文件(没有则跳过)：
  M( v- [2 _# Q# g% ], P' `
, ^/ g3 a, ?8 l8 M1 j8 p& J; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
5 a! L/ H7 t7 e  B: w2 A+ `;
* ~% Q$ V6 p6 q) N; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
! p$ V* R/ j+ HC:\WINDOWS\System32\3wareSrv.exe
' ?2 I4 P2 t) n: |5 U. t; K/ u& H\SystemRoot\C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll

9 F9 o  [7 h6 s) c) L" q\SystemRoot\System32\DRIVERS\22jn.sys
& s2 p  d; I# j8 B  e6 A$ N\SystemRoot\System32\DRIVERS\43ecu.sys
\??\C:\Documents and Settings\All Users\Application Data\Microsoft\Office\SYSTEM\ntptdb.sys
\SystemRoot\system32\drivers\pnduojtwbt.sys
9 {- _% t5 F" ]9 J\SystemRoot\system32\drivers\RsBoot.sys
) _3 f. y+ p% v+ S6 M" Ssystem32\DRIVERS\sr.sys
\SystemRoot\system32\drivers\unzxzsrs.sys
\SystemRoot\system32\DRIVERS\ViBus.sys
  m) s$ r) n8 O. L* S$ U# y' v\SystemRoot\system32\drivers\zhibmaso.sys
+ k+ W$ {4 \2 r; v5 [
# }  j7 w. m6 W- z- y2、用SREng删除以下【注册表】项(没有则跳过)：

# w: M/ k/ }2 j  n+ {  X" W. _" |( N0 J<IMJPMIG8.1>
! F5 |5 A0 c  Z  i<PHIME2002A>
<PHIME2002ASync>

3、用SREng删除【所有启动文件夹】内容(没有则跳过)
  A6 v* h0 `) R9 f* V/ a
7 y+ r3 U2 k. E4、用SREng删除以下【服务】项(没有则跳过)：

7 n/ X" e0 o6 |[3ware Controller Service / 3wareSrv]
[NetMeeting Remote Desktop Sharing / mnmsrvc]
$ Q2 k# H. i9 v7 a8 E5 |
. r! }" y4 n  O# b7 o/ c& l' M' m5、用SREng删除以下【驱动程序】项(没有则跳过)：

7 R+ v) L6 B5 u% u- `0 w- e4 d[22j / 22jn]
[43ec / 43ecu]
[ntptdb / ntptdb]
[pnduojtwbt / pnduojtwbt]
[RsAntiSpyware / RsAntiSpyware]
[System Restore Filter Driver / sr]
[System Services / unzxzsrs]
4 `) C! @  n* z& f* S[ViBus / ViBus]
[ATI Extend / zhibmaso]

6、用SREng删除以下【浏览器加载项】项(没有则跳过)：
. |9 w+ X. ?" {7 y* T
/ P, O$ z- ^8 j[Zcom 杂志]
# X% d. F% v' a- }- H- H5 b3 V[Browser Enhanced Objects]
% J3 X' y# z2 h0 [) \5 y
7 b6 k4 g4 E+ M& _$ I. L( E最后,重新启动计算机.Tored祝您好运!
======================================================
[End]

傲天♂元始

你就这样弄，不行我也没办法

傲天♂扬帆

独恋有按原始说的重新操作一次吗？

独恋伊影

找不到要删的文件。。。。

傲天♂元始

有些都是隐藏起来的

傲天♂风云

6 y. x! N" ~! R2 c. H# h
我对代码 一点都不懂

傲天♂元始

。。。这不是代码只是系统的扫描日志而已

傲天♂冷漠

我汗~~~
" r: g+ l, h% v3 w* a& `0 M这么多代码~~~