在这里

独恋伊影

1. 
   * K  k- z4 x  \0 Z1 O
2. 2008-05-22,20:37:43
   + A2 x! u8 K( e2 c6 _: W
3. System Repair Engineer 2.5.16.900
   5 h! ^# R0 w) G) b
4. Smallfrogs (http://www.KZTechs.com)
   
5. Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能
   
6. 以下内容被选中：
   / l* B/ _1 j) W% U8 ?% R1 a
7.     所有的启动项目（包括注册表、启动文件夹、服务等）
   - G% d0 G8 f% |0 G
8.     浏览器加载项
   
9.     正在运行的进程（包括进程模块信息）
   
10.     文件关联
    
11.     Winsock 提供者
    9 k, b& @6 W7 i& \- o- K% S8 O  S- R
12.     Autorun.inf
    . m* m, D: z& b
13.     HOSTS 文件
    
14.     进程特权扫描
    5 ]  T- R2 H$ I: d
15. 
    
16. 启动项目
    2 J. n& e0 A7 G  p
17. 注册表
    
18. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    6 p; `5 w- a9 ?$ s  I
19.     <ctfmon.exe><C:\WINDOWS\system32\CTFMON.EXE>  [(Verified)Microsoft Windows Publisher]
    $ D, ]# X, V- M
20. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    
21.     <360Safebox><"C:\Program Files\360Safebox\safeboxTray.exe" /r>  [(Verified)Qizhi Software (beijing) Co. Ltd]
    
22.     <360Safetray><C:\Program Files\360safe\safemon\360tray.exe /start>  [(Verified)Qizhi Software (beijing) Co. Ltd]
      V1 w' u7 Z9 [+ G
23.     <360Antiarp><C:\Program Files\360safe\AntiArp\AntiArp.exe /start>  [(Verified)Qizhi Software (beijing) Co. Ltd]
    
24.     <KavStart><"C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KAVStart.exe" -startup>  [(Verified)KINGSOFT CORPORATION]
    
25.     <IMJPMIG8.1><; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32>  [N/A]
    
26.     <PHIME2002A><; >  [N/A]
    ! d4 N* H6 s  O& ]$ c; ]8 ]) ]% U
27.     <PHIME2002ASync><; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32>  [N/A]
    
28. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    / z+ ^! E9 F- ?5 I
29.     <shell><Explorer.exe>  [(Verified)Microsoft Windows Component Publisher]
    
30.     <Userinit><C:\WINDOWS\system32\UserInit.exe,>  [(Verified)Microsoft Windows Publisher]
    5 w/ K+ r, G& D: X
31.     <UIHost><logonui.exe>  [(Verified)Microsoft Windows Publisher]
    ) {" I4 d4 R+ {$ l4 e
32. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    ' u+ h- L& d+ W8 n# X, [* }
33.     <{AC2DC2EF-5165-40A3-8CDF-41DCA1B0901A}><C:\WINDOWS\system32\shlhook.dll>  [Beijing Rising Technology Co., Ltd.]
    " h5 c& ~/ }6 e: U
34. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
    
35.     <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE>  [N/A]
    ! B8 J4 r1 a% Z: N* u6 b
36. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
    
37.     <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [N/A]
    & r6 V+ {. G, F3 Y, j0 D
38. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
    " H2 ]! ^9 n: N/ b% M* U
39.     <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [N/A]
    $ r) b% [+ q& M6 f/ L
40. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
    ; O4 D2 m. Q8 }+ q
41.     <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [N/A]
    1 O6 w  g, x' e+ o! K
42. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
    1 i8 w& S7 W1 l4 \+ f8 {$ M
43.     <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Remove.PerUser.NT>  [(Verified)Microsoft Windows Publisher]
    
44. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
    ) S  c0 ?7 A) }7 q) U
45.     <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser>  [(Verified)Microsoft Windows Publisher]
    
46. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
    
47.     <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp10.inf,PerUserStub>  [(Verified)Microsoft Windows Publisher]
      g# C; t8 d1 I9 h1 q. g6 j
48. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
    
49.     <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [N/A]
    / ^5 {" O, W, N' d7 ]9 Z
50. ==================================
    
51. 启动文件夹
    
52. N/A
    ' C' q: @5 w% s. K
53. ==================================
    
54. 服务
    
55. [3ware Controller Service / 3wareSrv][Stopped/Auto Start]
    6 x6 X8 b3 B% B( w' ?9 Q6 |
56.   <C:\WINDOWS\System32\3wareSrv.exe><N/A>
    % [" Z, g" b) j/ I: I5 M
57. [Google Updater Service / gusvc][Stopped/Manual Start]
    
58.   <"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"><Google>
    
59. [Help and Support / helpsvc][Stopped/Disabled]
    ) m6 r4 M8 a' N: Q) f3 F$ c
60.   <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll><N/A>
    : p( H5 d$ f% @! A
61. [Human Interface Device Access / HidServ][Stopped/Boot Start]
    & N; I! N3 a) R
62.   <\SystemRoot\C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
    
63. [Kingsoft Internet Security Common Service / KISSvc][Stopped/Auto Start]
    
64.   <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KISSvc.EXE><Kingsoft Corporation>
    
65. [Kingsoft Personal Firewall Service / KPfwSvc][Running/Auto Start]
    
66.   <"C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KPfwSvc.EXE"><Kingsoft Corporation>
    ( ^8 L% J- A3 b" u/ h- D
67. [Kingsoft Antivirus KWatch Service / KWatchSvc][Running/Auto Start]
    
68.   <"C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KWatch.EXE"><Kingsoft Corporation>
    . H0 N: i. n' S2 ^2 ~/ N
69. [NetMeeting Remote Desktop Sharing / mnmsrvc][Stopped/Manual Start]
    ' Q7 a" `8 h7 N1 b0 O4 F
70.   <><N/A>
    
71. [Qvod Terminal / Qvod Terminal][Running/Auto Start]
    ) x( _& A$ a0 O' x
72.   <C:\Program Files\QvodPlayer\QvodTerminal.exe><Shenzhen QVOD Technology Co.,Ltd>
    
73. ==================================
    7 m  ]9 O" n6 S
74. 驱动程序
    * ]8 f; Z8 Y! k) q7 c6 l
75. [22j / 22jn][Stopped/Boot Start]
    % O$ U* E9 {0 Y9 r% V) r" B
76.   <\SystemRoot\System32\DRIVERS\22jn.sys><N/A>
    
77. [360AntiArp / 360AntiArp][Running/System Start]
    . C4 b/ Q5 }% H" q, y; Z
78.   <\??\C:\WINDOWS\system32\drivers\360AntiArp.sys><360安全中心>
    % D" J- J, ?: R+ x- r
79. [43ec / 43ecu][Stopped/Boot Start]
    
80.   <\SystemRoot\System32\DRIVERS\43ecu.sys><N/A>
    
81. [Intel(r) 82801 Audio Driver Install Service (WDM) / ac97intc][Running/Manual Start]
    
82.   <system32\drivers\ac97intc.sys><Intel Corporation>
    
83. [Promise driver accelerator / bb-run][Running/Boot Start]
    
84.   <\SystemRoot\system32\DRIVERS\bb-run.sys><Promise Technology, Inc.>
    
85. [Promise Removable Disk Control Driver / dontgo][Running/Boot Start]
    2 e* p1 @9 C% r, E5 l4 p3 c
86.   <\SystemRoot\system32\DRIVERS\DontGo.sys><Promise Technology, Inc.>
    
87. [KAVBase / KAVBase][Running/Auto Start]
    
88.   <\??\C:\WINDOWS\system32\Drivers\KAVBase.sys><Kingsoft Corporation>
    
89. [KAVBootC / KAVBootC][Running/Boot Start]
    / z! f' B. ]1 n  d& }9 T4 v
90.   <\SystemRoot\system32\Drivers\KAVBootC.sys><Kingsoft Corporation>
    
91. [KAVSafe / KAVSafe][Running/Auto Start]
    
92.   <\??\C:\WINDOWS\system32\Drivers\KAVSafe.sys><Kingsoft Corporation>
    8 f: x6 R: x- @& b
93. [KNetWch / KNetWch][Running/System Start]
    
94.   <\??\C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KNetWch.SYS><Kingsoft Corporation>
    
95. [KWatch3 / KWatch3][Running/Auto Start]
    
96.   <\??\C:\WINDOWS\system32\drivers\KWatch3.SYS><Kingsoft Corporation>
    
97. [ntptdb / ntptdb][Stopped/Auto Start]
    9 {/ A2 g* V8 ]" n) F# S$ E8 }
98.   <\??\C:\Documents and Settings\All Users\Application Data\Microsoft\Office\SYSTEM\ntptdb.sys><N/A>
    % K9 ^* J0 D# q. s8 c/ O. k
99. [nv / nv][Running/Manual Start]
    
100.   <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
     
101. [NVIDIA nForce RAID Driver / nvrd32][Running/Boot Start]
     5 @& j' F! ^* t+ \6 t# ?& F
102.   <\SystemRoot\system32\DRIVERS\nvrd32.sys><NVIDIA Corporation>
     3 ?" U: I1 }# I# K0 {+ t
103. [DDK PACKET Protocol / Packet][Running/Manual Start]
     
104.   <system32\DRIVERS\ProtoDrv.sys><360安全中心>
     " [+ @3 _7 u, b3 S: j
105. [pnduojtwbt / pnduojtwbt][Stopped/Boot Start]
     
106.   <\SystemRoot\system32\drivers\pnduojtwbt.sys><N/A>
     " V/ z. z: Y4 j! o$ ~3 ~
107. [Direct Parallel Link Driver / Ptilink][Running/Manual Start]
     
108.   <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
     
109. [RsAntiSpyware / RsAntiSpyware][Stopped/Boot Start]
     
110.   <\SystemRoot\system32\drivers\RsBoot.sys><N/A>
     
111. [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start]
     / u( F! G0 `/ O! Y' R
112.   <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
     0 M) R6 R, H) f+ i& s$ l
113. [SafeBoxKrnl / SafeBoxKrnl][Running/System Start]
     
114.   <\??\C:\Program Files\360Safebox\SafeBoxKrnl.sys><360安全中心>
     7 Y  C+ [3 \3 ~$ p* C, \1 N  T
115. [Secdrv / Secdrv][Stopped/Manual Start]
     0 X5 R- X; x8 I6 P
116.   <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
     ; P  }. K2 t% E! K( l- W- w
117. [SATALink External Device Filter / SiRemFil][Running/Boot Start]
     
118.   <\SystemRoot\system32\DRIVERS\SiRemFil.sys><Silicon Image, Inc.>
     # F) ~1 F. w, o% B, z. y9 Y
119. [System Restore Filter Driver / sr][Stopped/Disabled]
     : ]$ \* B8 \! {7 z
120.   <system32\DRIVERS\sr.sys><N/A>
     
121. [TesSafe / TesSafe][Stopped/Manual Start]
     
122.   <\??\C:\WINDOWS\system32\TesSafe.sys><TENCENT>
     
123. [System Services / unzxzsrs][Stopped/Boot Start]
     : p8 B1 W/ B) l
124.   <\SystemRoot\system32\drivers\unzxzsrs.sys><N/A>
     - R1 D1 e' I6 |
125. [ViBus / ViBus][Stopped/Boot Start]
       X2 Q5 j( q& S6 A
126.   <\SystemRoot\system32\DRIVERS\ViBus.sys><N/A>
     
127. [World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start]
     
128.   <system32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>
     
129. [VIA SATA IDE Hot-plug Driver / xfilt][Running/Boot Start]
     
130.   <\SystemRoot\system32\DRIVERS\xfilt.sys><VIA Technologies,Inc>
     
131. [ATI Extend / zhibmaso][Stopped/Boot Start]
     6 c  t) Y4 M# b3 c
132.   <\SystemRoot\system32\drivers\zhibmaso.sys><N/A>
     
133. [Vimicro USB PC Camera (ZC0301PL) / ZSMC301b][Running/Manual Start]
     
134.   <System32\Drivers\usbVM31b.sys><Vimicro Corporation>
     
135. ==================================
     , Q4 ?. g! |6 A
136. 浏览器加载项
     . P! [- q8 s' K, Z& m) |3 h: M% |
137. [Google Toolbar Helper]
     ) {3 @% t% p" i. ]3 g: D/ I% V
138.   {AA58ED58-01DD-4d91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     
139. [Google Toolbar Notifier BHO]
     
140.   {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll, Google Inc.>
     % @. |( D! X4 g; z; f
141. [SafeMon Class]
     # Y2 Y5 i+ j% g( x
142.   {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, 360.CN>
     
143. [kingsoft browser shield]
     6 ~: e' \+ i2 Z8 J" f( h
144.   {D963BE1A-6B35-47DB-B002-49FAE71D85CC} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KASBrowserShield.DLL, Kingsoft Corporation>
     7 F- c6 t* d2 W" k% w9 f) i$ I
145. [IEBuddyExtControl Class]
     / H7 {- b' R+ B1 ?5 W# b: M
146.   {3AECD3C1-7085-4731-96DC-47B6CF7EF749} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddyExt.DLL, Kingsoft Corporation>
     
147. [Zcom 杂志]
     4 T# |) Y* H/ R$ B9 x: m# ]. W
148.   {4045D313-1D5E-4fe4-93A0-A34630B6A00B} <C:\Zcom\E-Space.exe, N/A>
     
149. [&Google]
     ( c6 a- ~/ Z) ]# s# t8 t2 \
150.   {2318C2B1-4965-11d4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     3 y- X3 N' R9 [3 f
151. [KooPlayer Control]
     3 x6 S& N5 ]8 q. T3 O# x/ [# n5 Y
152.   {C728DAB8-FDF5-4CD7-89DD-879D25794C77} <C:\WINDOWS\system32\CCTVKO~1.OCX, Koos>
     
153. [Shockwave Flash Object]
     
154.   {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx, Adobe Systems, Inc.>
     : c; }' K$ R. c0 Y8 M4 D
155. [KUpdateObj2 Class]
     
156.   {D82303B7-A754-4DCB-8AFC-8CF99435AACE} <C:\WINDOWS\system32\KingSoft\KOS\UpdateOcx2.dll, Kingsoft Corporation>
     
157. [Google Script Object]
     
158.   {00EF2092-6AC5-47C0-BD25-CF2D5D657FEB} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     
159. [EWA Control]
     % K3 S2 h5 s- H1 F; m6 s# W2 u3 K
160.   {18226BF8-DC0B-4D81-80E9-A41AE37BB73A} <C:\PROGRA~1\PPLive\SYNACA~2.OCX, Synacast>
     3 y+ A1 s* y3 ~. L1 Y) }" X9 l
161. [Windows Media Player]
       z+ ~% _$ F* e5 W2 p
162.   {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\msdxm.ocx, Microsoft Corporation>
     1 d  w. d1 r9 m6 ^) K7 b; Z
163. [&Google]
     
164.   {2318C2B1-4965-11D4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     
165. [HTML Document]
     
166.   {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
     
167. [DHTML Edit Control Safe for Scripting for IE5]
     " C2 ~$ w  z6 E) j6 J* T
168.   {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, Microsoft Corporation>
     : X* \  y8 @3 |. |% u9 U' z! H
169. [RealPlayer RAM Download Handler]
     
170.   {2F542A2E-EDC9-4BF7-8CB1-87C9919F7F93} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
     # J9 x' L6 F8 Y8 M2 J* T
171. [IEBuddyExtControl Class]
     
172.   {3AECD3C1-7085-4731-96DC-47B6CF7EF749} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddyExt.DLL, Kingsoft Corporation>
     
173. [XML Document]
     ( g8 m# }* ^# [, r
174.   {48123BC4-99D9-11D1-A6B3-00C04FD91555} <C:\WINDOWS\system32\msxml3.dll, Microsoft Corporation>
     
175. [HHCtrl Object]
     ! U& i) w* H( l  [# I9 ]- e' A6 p
176.   {52A2AAAE-085D-4187-97EA-8C30DB990436} <C:\WINDOWS\system32\hhctrl.ocx, Microsoft Corporation>
     7 i# x/ X7 ~6 B% s9 `6 d+ v
177. [Windows Media Player]
     
178.   {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     9 q& v8 Y) m; ?1 A, b# g
179. [Active Desktop Mover]
     ( Q# M  r1 O$ {0 a- q2 ~4 ?! J
180.   {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A>
     
181. [360SafeLive]
     
182.   {87515F61-A66C-4319-A0E0-D416CB8059E3} <C:\Program Files\360safe\live.dll, 360.cn>
     
183. [Microsoft Web 浏览器]
     
184.   {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
     
185. [Browser Enhanced Objects]
     : e$ x$ Q( B/ `9 Y3 n, q, K, D$ o3 Y
186.   {986488AF-13D5-9DDF-4FEF-9FB88698CFC1} <C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\USERDATA\webbrowser_2011.dll, N/A>
     
187. [Google Toolbar Helper]
     
188.   {AA58ED58-01DD-4D91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     
189. [Microsoft Scriptlet Component]
     
190.   {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation>
     
191. [Google Toolbar Notifier BHO]
     * d3 n7 K) {( `0 ?2 h1 p7 ?
192.   {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll, Google Inc.>
     , Q; R, b( F: Q0 R' [4 v5 K
193. [SearchAssistantOC]
     1 J% o  M3 L! V5 ^5 u
194.   {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
     $ _+ g8 X0 Y  W& Y
195. [SafeMon Class]
     
196.   {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, 360.CN>
     
197. [RDS.DataSpace]
     
198.   {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
     + w8 K5 D: U! u. O  W. g
199. [KooPlayer Control]
     
200.   {C728DAB8-FDF5-4CD7-89DD-879D25794C77} <C:\WINDOWS\system32\CCTVKO~1.OCX, Koos>
     . t- x& n, F$ F2 e6 L9 W7 q
201. [AUDIO__MID Moniker Class]
     
202.   {CD3AFA74-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     
203. [AUDIO__MP3 Moniker Class]
     6 c- t9 @6 \! q2 @, e
204.   {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     
205. [AUDIO__X_MS_WMA Moniker Class]
     5 a, @! W. R0 x  H
206.   {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     
207. [VIDEO__X_MS_WMV Moniker Class]
     # w( `3 s/ v1 p+ _, k# V. u* V9 m
208.   {CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     2 \! k7 I% o/ o6 N
209. [RealPlayer G2 Control]
     
210.   {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
     
211. [Shockwave Flash Object]
     ! B( Z  O2 g% j  s1 |( `
212.   {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx, Adobe Systems, Inc.>
     ! l/ x  C) Y; _! q
213. [KUpdateObj2 Class]
     
214.   {D82303B7-A754-4DCB-8AFC-8CF99435AACE} <C:\WINDOWS\system32\KingSoft\KOS\UpdateOcx2.dll, Kingsoft Corporation>
     4 h: V! F2 j6 F! \! ~2 e9 t! R
215. [kingsoft browser shield]
     
216.   {D963BE1A-6B35-47DB-B002-49FAE71D85CC} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KASBrowserShield.DLL, Kingsoft Corporation>
       ^, k5 Q3 ]4 x
217. [PasswordEditCtrl Class]
     
218.   {E787FD25-8D7C-4693-AE67-9406BC6E22DF} <C:\WINDOWS\system32\qqedit\qqedit.dll, 腾讯科技（深圳）有限公司>
     1 ^& c+ T; W  z
219. [QvodCtrl Class]
     - L; ~( L$ q; o) a5 P  X; P
220.   {F3D0D36F-23F8-4682-A195-74C92B03D4AF} <C:\Program Files\QvodPlayer\QvodInsert.dll, Shenzhen QVOD Technology Co.,Ltd>
     8 ~/ q# A4 j, e: Q; o
221. [&使用超级旋风下载]
     
222.   <C:\Program Files\Tencent\QQDownload\geturl.htm, N/A>
     6 N' A! w8 f0 F2 k4 P! A7 V
223. [&使用超级旋风下载全部链接]
     
224.   <C:\Program Files\Tencent\QQDownload\getAllurl.htm, N/A>
     
225. [使用迅雷下载]
     
226.   <, N/A>
     
227. [使用迅雷下载全部链接]
     9 g$ R- E$ D/ i& K0 i5 _; `
228.   <, N/A>
     
229. [导出到 Microsoft Office Excel(&X)]
     
230.   <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
     4 S  C% d) H3 l/ [6 ]& I
231. [添加到QQ表情]
     
232.   <C:\Program Files\Tencent\QQ\AddEmotion.htm, N/A>
     
233. ==================================
     , w% u# ]" k8 u! e
234. 正在运行的进程
     ' x; _) T; E# y$ f& D
235. [PID: 444 / SYSTEM][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
236. [PID: 496 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     + ]% o7 _+ @* ]( H7 [! o
237. [PID: 520 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
238.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
     . y5 c. D( W( s5 g& x' k
239. [PID: 564 / SYSTEM][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
240. [PID: 576 / SYSTEM][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
       j# `+ o: q4 H& S
241. [PID: 720 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
242. [PID: 780 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
243. [PID: 856 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
244. [PID: 944 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     / W0 e; G" R0 N1 j
245. [PID: 1012 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
246. [PID: 1236 / Administrator][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_qfe.070613-1311)]
     
247.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     0 h, Q$ i) [% A
248.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     $ Q: \" @6 p* k( K  {' ]3 i; }' H
249.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
     8 d  |/ k0 [" Z8 h
250.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
251.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KAVEXT.DLL]  [Kingsoft Corporation, 2008,05,07,373]
     
252.     [C:\Program Files\Tencent\QQ\qdshm.dll]  [, 1, 0, 101, 20]
     5 B0 r! t* h5 I
253.     [C:\Program Files\Tencent\QQ\MFC42.DLL]  [Microsoft Corporation, 6.00.8665.0]
     $ `* l- S. F; v$ k
254.     [C:\Program Files\WinRAR\rarext.dll]  [N/A, ]
     " c3 l" ?5 f9 i: c3 H7 ]0 k1 z8 O" ?
255.     [C:\WINDOWS\system32\shlhook.dll]  [Beijing Rising Technology Co., Ltd., 4.0.0.9]
     0 w7 p$ j6 P: ^4 p$ [, W
256.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
257.     [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
     - ]- {% h* b. v
258. [PID: 1332 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
     
259.     [C:\WINDOWS\system32\mdimon.dll]  [Microsoft Corporation, 11.3.8166.2]
     
260.     [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll]  [Microsoft Corporation, 11.3.8166.2]
     $ A: O. h. S3 ?$ p$ r7 C: T! v
261. [PID: 1540 / Administrator][C:\Program Files\360safe\AntiArp\AntiArp.exe]  [360安全中心, 2, 0, 0, 1008]
     $ e; N! b- H5 u& x) c9 h4 L: D
262.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
263.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
264.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
265.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
266. [PID: 1560 / Administrator][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
267.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
268.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
269.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     7 \8 E0 |2 e. |" M2 G1 J9 b( `
270. [PID: 1576 / Administrator][C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe]  [Google Inc., 2, 0, 301, 1654]
     8 Z4 I/ V% a/ @' f9 R( ?( B
271.     [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\gtn.dll]  [Google Inc., 2, 0, 301, 7164]
     
272.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     7 D$ }+ }9 u" N' N. {; m, \. L6 i
273.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     $ k# |' ^( t) P% L" t+ i, o: M
274.     [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\res_zh-CN.dll]  [Google Inc., 2, 0, 301, 7164]
     1 {) P! T4 {/ v2 c5 x' R/ F4 r* I
275.     [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll]  [Google Inc., 2, 0, 301, 7164]
     
276.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
277.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
278. [PID: 1648 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
279. [PID: 1744 / SYSTEM][C:\Program Files\QvodPlayer\QvodTerminal.exe]  [Shenzhen QVOD Technology Co.,Ltd, 2, 5, 0, 53]
     - ~5 N1 T# [6 `9 R
280. [PID: 1860 / SYSTEM][C:\WINDOWS\system32\skeys.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     " ~/ V! K# A" f7 u3 u$ Z0 B5 E
281. [PID: 1908 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
282. [PID: 1964 / LOCAL SERVICE][C:\WINDOWS\system32\wdfmgr.exe]  [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
     
283. [PID: 2772 / Administrator][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
     % n. q2 k: q8 \* X- j% d$ M+ K% B) c
284.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
285.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
286.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
287.     [c:\program files\google\googletoolbar2.dll]  [Google Inc., 4, 0, 1606, 6690]
     ( T5 E7 s2 C+ k4 u
288.     [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll]  [Google Inc., 2, 0, 301, 7164]
     
289.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KASBrowserShield.DLL]  [Kingsoft Corporation, 2008,04,15,2]
     1 a& @8 w" o8 w$ v; \$ d3 e& M. Q1 L
290.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddy.dll]  [Kingsoft Corporation, 2008,04,15,2]
     
291.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddyExt.DLL]  [Kingsoft Corporation, 2008,05,14,83]
     
292.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KANTray.dll]  [Kingsoft Corporation, 2008,04,15,2]
     
293.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KAVAFish.DLL]  [Kingsoft Corporation, 2008,05,13,78]
     
294.     [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
     ' O* g* u1 Y6 X/ K: ?$ s- Y0 c
295.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
     , w0 Q. C, T/ X7 |
296.     [C:\WINDOWS\system32\WN.IME]  [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
     
297.     [C:\Program Files\ShiQiang\wnime\Dll32\wnpy_StatusWnd.dll]  [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
     $ V, ^/ H& K( C' K! V5 ^+ J
298.     [C:\Program Files\ShiQiang\wnime\Dll32\wnpy_CompWnd.dll]  [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
       J5 @7 m! `  \, ^
299.     [C:\Program Files\ShiQiang\wnime\Dll32\wnpy_Query.dll]  [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
     5 H' R; r! b4 B# W0 g; M6 n5 h! I
300.     [C:\WINDOWS\system32\SOGOUPY.IME]  [Sogou.com Inc., 3.2.0.0]
     
301.     [C:\Documents and Settings\Administrator\My Documents\SogouInput\Plugin\SgImeWord.dll]  [Sogou.com Inc., 3.2.0.0]
     
302.     [C:\WINDOWS\system32\WINWB98.IME]  [Microsoft Corporation, 4.00.950]
     
303.     [C:\WINDOWS\system32\WINWB86.IME]  [Microsoft Corporation, 4.00.950]
     
304.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
305. [PID: 1124 / Administrator][C:\Program Files\Tencent\QQ\TXPlatform.exe]  [Tencent, 1, 0, 170, 0]
     
306.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     0 r( i+ m- M9 x9 c) t7 x; G, S
307.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
308.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     2 x; f2 {+ Y, Z4 J5 E
309.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
310. [PID: 928 / Administrator][F:\arvmon.exe]  [任软工作室, 2.2.5.201]
     
311.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
312.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
313.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
314.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
315.     [F:\Vdata.dll]  [任软工作室, 2, 2, 1, 94]
     . [6 L/ Y$ p% z; J1 W
316. [PID: 2540 / Administrator][F:\AutoGuarder.exe]  [任软工作室, 2.2.5.201]
     / D" U# _# s0 I7 ?! _/ A
317.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
318.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     / V! Q$ F% O6 I- B8 Z
319.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
320.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     4 C. [/ L. Z2 }0 n% x; I
321. [PID: 2476 / Administrator][d:\我的文档\桌面\系统检测修复\SREngPS.EXE]  [Smallfrogs Studio, 2.5.16.900]
     
322.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     9 C# S- U3 R3 S0 y  \, z) q" k
323.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
324.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
325.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
326.     [d:\我的文档\桌面\系统检测修复\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]
     : \! g8 |" i6 o$ O% x2 {2 D" y
327. ==================================
     
328. 文件关联
     % t0 p/ K+ `/ B* B( d
329. .TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
     
330. .EXE  OK. ["%1" %*]
     2 A) }! T0 q& @" `
331. .COM  OK. ["%1" %*]
     
332. .PIF  OK. ["%1" %*]
       U/ z6 z0 V2 c7 l+ O( G
333. .REG  OK. [regedit.exe "%1"]
     
334. .BAT  OK. ["%1" %*]
     % ~$ `$ G7 s  `, C# y6 E( p
335. .SCR  OK. ["%1" /S]
     - I& O, k! U  Q2 r2 b9 L# _
336. .CHM  OK. ["C:\WINDOWS\hh.exe" %1]
     : }! O1 w1 l/ t
337. .HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
     # R4 {0 l+ o$ y
338. .INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
     
339. .INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
     
340. .VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
     
341. .JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
     
342. .LNK  OK. [{00021401-0000-0000-C000-000000000046}]
     
343. ==================================
     ( |9 o1 q0 z% e+ n
344. Winsock 提供者
     
345. N/A
     
346. ==================================
     
347. Autorun.inf
     
348. N/A
     
349. ==================================
     8 U4 l: P+ B4 f% v4 z4 `, Z
350. HOSTS 文件
     ) ]$ Q+ Z; |+ W- J
351. N/A
     
352. ==================================
     6 i- M+ w; M, C: _% U
353. 进程特权扫描
     " {8 z% P+ H9 K4 @5 c* G' T1 {
354. 特殊特权被允许： SeLoadDriverPrivilege [PID = 520, C:\WINDOWS\SYSTEM32\WINLOGON.EXE]
     
355. 特殊特权被允许： SeDebugPrivilege [PID = 928, F:\ARVMON.EXE]
     
356. 特殊特权被允许： SeLoadDriverPrivilege [PID = 928, F:\ARVMON.EXE]
     
357. 特殊特权被允许： SeDebugPrivilege [PID = 2540, F:\AUTOGUARDER.EXE]
     
358. 特殊特权被允许： SeLoadDriverPrivilege [PID = 2540, F:\AUTOGUARDER.EXE]
     # p! O: z% Q7 {2 G
359. ==================================
     % N- a* j4 S6 n- x
360. API HOOK
     
361. N/A
     
362. ==================================
     2 U5 C8 U5 u' v! u9 z  y
363. 隐藏进程
     * f  F- F0 X( v& q  M/ H
364. N/A
     & |. }' A1 ?+ d  Y! S
365. ==================================
     % O. U" f! r. L# X) _* J
366. 
     9 P" w+ Q; K) J

复制代码

傲天♂扬帆

跟原始说了，不知道能不能看明白。。。

傲天♂元始

[Start]

2008-05-22,22:24:21
4 T' z/ z4 p: I2 Z! p! b
SREngLOG智能分析专家 V1.2.0.125
Tored (http://hi.baidu.com/peaset)
6 U( e1 r% C6 d9 W% Y# a4 o
======================================================
2 w# l+ c( C  @, v: m6 b6 H% P/ Z' s* u6 H以下过程将用到SREng、PowerRmv，如果您不熟悉这两款工具的使用方法，请参考下列链接：
7 P! G- I( ]5 a  b4 _' n+ v: _* ySREng详细操作方法： http://hi.baidu.com/peaset/blog/ ... dd19224e4aeadf.html
PowerRmv详细操作方法： http://hi.baidu.com/peaset/blog/ ... 6fb5eb77c63816.html
/ {0 @1 _/ t9 R/ X======================================================
2 N4 C) J, h# O" L- p# J
7 ]4 z2 m( k+ z- }8 u) W2 B以下是病毒清除步骤：

% v! }6 ?; y6 T  f" K9 b4 ~1、用PowerRmv删除以下文件(没有则跳过)：

; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
4 ?8 \% Z4 n5 N* Q8 Q;
; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
C:\WINDOWS\System32\3wareSrv.exe
\SystemRoot\C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll
( M/ l" a1 _& _8 m. U, A
\SystemRoot\System32\DRIVERS\22jn.sys
\SystemRoot\System32\DRIVERS\43ecu.sys
7 ^' |$ t9 v) `/ o8 B\??\C:\Documents and Settings\All Users\Application Data\Microsoft\Office\SYSTEM\ntptdb.sys
1 P5 M' ]1 K9 P( v* `\SystemRoot\system32\drivers\pnduojtwbt.sys
! n0 j& I+ r& F/ r3 K4 F; s+ H$ l\SystemRoot\system32\drivers\RsBoot.sys
system32\DRIVERS\sr.sys
\SystemRoot\system32\drivers\unzxzsrs.sys
\SystemRoot\system32\DRIVERS\ViBus.sys
6 o. B7 \! V9 _+ q: e\SystemRoot\system32\drivers\zhibmaso.sys
% K  f6 H+ z7 W: P, Y* g
2、用SREng删除以下【注册表】项(没有则跳过)：
/ W3 `, G2 y0 Y+ P
<IMJPMIG8.1>
2 }: F0 x, U* n<PHIME2002A>
<PHIME2002ASync>
& V# ]4 W0 z3 ^! i: w# ?
3、用SREng删除【所有启动文件夹】内容(没有则跳过)
3 u: ]( r) n+ h2 r9 U
+ {2 I! M8 ]0 \  M4、用SREng删除以下【服务】项(没有则跳过)：
/ a9 B  {# D8 Y. ^" l
# Z) y% o, o* ^[3ware Controller Service / 3wareSrv]
[NetMeeting Remote Desktop Sharing / mnmsrvc]
& Y9 X& ~2 t, Z  V0 q/ g( {
* V) B  C* X! ?; [. e3 r* E5、用SREng删除以下【驱动程序】项(没有则跳过)：

: m3 r( G) x9 Y' b  ]# m3 `[22j / 22jn]
4 S! |/ x( M/ S2 x# x[43ec / 43ecu]
' i) E# o, }1 D, Z3 v[ntptdb / ntptdb]
[pnduojtwbt / pnduojtwbt]
[RsAntiSpyware / RsAntiSpyware]
6 b; @% s0 E9 D, G6 q3 g* p[System Restore Filter Driver / sr]
+ {/ r0 G. M6 f* C9 a[System Services / unzxzsrs]
[ViBus / ViBus]
9 [& T4 x; ~0 O1 g6 H, u/ ^[ATI Extend / zhibmaso]

6、用SREng删除以下【浏览器加载项】项(没有则跳过)：
3 N* L3 f, @7 ^  a- I1 J/ |( @  `
- f1 j3 O# n, y" D2 M1 N, h+ N[Zcom 杂志]
1 o8 f/ y7 d* m" n! P[Browser Enhanced Objects]

+ j' e0 C- m  ^' p# }最后,重新启动计算机.Tored祝您好运!
======================================================
[End]

傲天♂元始

你就这样弄，不行我也没办法

傲天♂扬帆

独恋有按原始说的重新操作一次吗？

独恋伊影

找不到要删的文件。。。。

傲天♂元始

有些都是隐藏起来的

傲天♂风云

! `$ a! y: m6 l  ^+ l/ O
我对代码 一点都不懂

傲天♂元始

。。。这不是代码只是系统的扫描日志而已

傲天♂冷漠

我汗~~~
' ~8 N8 _" j/ W4 Z+ ?" z这么多代码~~~