在这里

独恋伊影

1. 
   1 A' V. R' u, _* \
2. 2008-05-22,20:37:43
   
3. System Repair Engineer 2.5.16.900
   6 N  p: R: U2 t1 \/ k5 F0 G8 ?" {
4. Smallfrogs (http://www.KZTechs.com)
   
5. Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能
   / ]9 b6 w: i8 C0 H8 {* W5 Q: o& ^
6. 以下内容被选中：
   
7.     所有的启动项目（包括注册表、启动文件夹、服务等）
   # d7 A- @- R+ z- W
8.     浏览器加载项
   - k; ?9 D5 `" B: A  X7 ]
9.     正在运行的进程（包括进程模块信息）
   # a+ C& r& S1 C' N- E! |
10.     文件关联
    , E' v. O5 o0 P1 c6 M4 s9 l9 m
11.     Winsock 提供者
    
12.     Autorun.inf
    
13.     HOSTS 文件
    
14.     进程特权扫描
    
15. 
    
16. 启动项目
    2 H$ u4 W" U3 O' X( h3 O1 p
17. 注册表
    3 ^3 M2 x3 b6 D8 c5 u
18. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    , V4 f3 I( A3 \) {
19.     <ctfmon.exe><C:\WINDOWS\system32\CTFMON.EXE>  [(Verified)Microsoft Windows Publisher]
    ' W: O! o# p! g6 `* ~9 J. d. K
20. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    * `( S& U. b8 ?' w( _
21.     <360Safebox><"C:\Program Files\360Safebox\safeboxTray.exe" /r>  [(Verified)Qizhi Software (beijing) Co. Ltd]
    " m/ ?1 o( x3 C, P. h( i  C
22.     <360Safetray><C:\Program Files\360safe\safemon\360tray.exe /start>  [(Verified)Qizhi Software (beijing) Co. Ltd]
    
23.     <360Antiarp><C:\Program Files\360safe\AntiArp\AntiArp.exe /start>  [(Verified)Qizhi Software (beijing) Co. Ltd]
    - E; f$ j* m% ^: W
24.     <KavStart><"C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KAVStart.exe" -startup>  [(Verified)KINGSOFT CORPORATION]
    $ V# W, `% S* s7 A% ]! E
25.     <IMJPMIG8.1><; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32>  [N/A]
    % y" N0 B. L3 d; p' Y
26.     <PHIME2002A><; >  [N/A]
    
27.     <PHIME2002ASync><; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32>  [N/A]
    
28. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    1 P2 k$ z5 X6 B  [/ Z/ c' a
29.     <shell><Explorer.exe>  [(Verified)Microsoft Windows Component Publisher]
    9 M' p( P$ Y, x' O; v8 B" v
30.     <Userinit><C:\WINDOWS\system32\UserInit.exe,>  [(Verified)Microsoft Windows Publisher]
    6 }8 k) x) f7 u! b
31.     <UIHost><logonui.exe>  [(Verified)Microsoft Windows Publisher]
    , t7 D6 |5 p+ j. u
32. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    
33.     <{AC2DC2EF-5165-40A3-8CDF-41DCA1B0901A}><C:\WINDOWS\system32\shlhook.dll>  [Beijing Rising Technology Co., Ltd.]
    
34. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
    
35.     <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE>  [N/A]
    
36. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
    
37.     <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [N/A]
    4 X4 b1 v0 @- y/ _3 T9 e
38. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
    6 H: j9 N# D; k# m
39.     <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [N/A]
    
40. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
    ; ~7 e7 ~2 z  q+ k% Q! ^+ Q9 A( j
41.     <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [N/A]
    : X: ?  H' w6 g
42. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
    
43.     <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Remove.PerUser.NT>  [(Verified)Microsoft Windows Publisher]
    
44. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
    8 Y" C, @3 K4 f+ V* \8 m
45.     <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser>  [(Verified)Microsoft Windows Publisher]
    
46. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
    
47.     <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp10.inf,PerUserStub>  [(Verified)Microsoft Windows Publisher]
    6 \# r: r& U, b: L5 ?( m- B9 |
48. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
    ' m5 _0 W7 x+ u- P) y$ q: F
49.     <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [N/A]
    
50. ==================================
    
51. 启动文件夹
    
52. N/A
    
53. ==================================
    ! E2 ]! V8 f. Y2 c
54. 服务
    " M4 J5 S' P5 |: D0 @
55. [3ware Controller Service / 3wareSrv][Stopped/Auto Start]
      h; b, D8 r/ I* A4 I& K1 O6 g
56.   <C:\WINDOWS\System32\3wareSrv.exe><N/A>
    & G, d+ v" U6 z7 `
57. [Google Updater Service / gusvc][Stopped/Manual Start]
    
58.   <"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"><Google>
    
59. [Help and Support / helpsvc][Stopped/Disabled]
    
60.   <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll><N/A>
    
61. [Human Interface Device Access / HidServ][Stopped/Boot Start]
    
62.   <\SystemRoot\C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
    
63. [Kingsoft Internet Security Common Service / KISSvc][Stopped/Auto Start]
    1 f4 U9 M! S- R( s" P
64.   <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KISSvc.EXE><Kingsoft Corporation>
    
65. [Kingsoft Personal Firewall Service / KPfwSvc][Running/Auto Start]
    % i- y& h4 w+ Z. Z
66.   <"C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KPfwSvc.EXE"><Kingsoft Corporation>
    
67. [Kingsoft Antivirus KWatch Service / KWatchSvc][Running/Auto Start]
    ; G6 Z3 O5 a- g
68.   <"C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KWatch.EXE"><Kingsoft Corporation>
      ?- C5 o: w9 l% o
69. [NetMeeting Remote Desktop Sharing / mnmsrvc][Stopped/Manual Start]
    2 |4 h) e/ q6 Y1 S% Z- C% X
70.   <><N/A>
    ) q2 L' W: r/ p& F$ P5 Q
71. [Qvod Terminal / Qvod Terminal][Running/Auto Start]
    
72.   <C:\Program Files\QvodPlayer\QvodTerminal.exe><Shenzhen QVOD Technology Co.,Ltd>
    
73. ==================================
    . g& h) }1 ]; v3 P- I: U5 f
74. 驱动程序
    
75. [22j / 22jn][Stopped/Boot Start]
    
76.   <\SystemRoot\System32\DRIVERS\22jn.sys><N/A>
    
77. [360AntiArp / 360AntiArp][Running/System Start]
    
78.   <\??\C:\WINDOWS\system32\drivers\360AntiArp.sys><360安全中心>
    ; U7 Z* n9 K5 ~
79. [43ec / 43ecu][Stopped/Boot Start]
    ( D9 O3 _0 ^' c: E* h; Z. G
80.   <\SystemRoot\System32\DRIVERS\43ecu.sys><N/A>
    
81. [Intel(r) 82801 Audio Driver Install Service (WDM) / ac97intc][Running/Manual Start]
    
82.   <system32\drivers\ac97intc.sys><Intel Corporation>
    % {- q( V4 R5 y/ D8 @5 N& O  {& Z
83. [Promise driver accelerator / bb-run][Running/Boot Start]
    2 {5 \( D- Q8 s/ {- E) p1 u* R* `
84.   <\SystemRoot\system32\DRIVERS\bb-run.sys><Promise Technology, Inc.>
    
85. [Promise Removable Disk Control Driver / dontgo][Running/Boot Start]
      U- m# Q+ y: W2 F0 W
86.   <\SystemRoot\system32\DRIVERS\DontGo.sys><Promise Technology, Inc.>
    
87. [KAVBase / KAVBase][Running/Auto Start]
    0 c  x. R9 h/ i
88.   <\??\C:\WINDOWS\system32\Drivers\KAVBase.sys><Kingsoft Corporation>
    ) i/ e7 b  C* U
89. [KAVBootC / KAVBootC][Running/Boot Start]
    
90.   <\SystemRoot\system32\Drivers\KAVBootC.sys><Kingsoft Corporation>
    
91. [KAVSafe / KAVSafe][Running/Auto Start]
    : k9 }$ t2 @9 u! ^8 B4 L7 v' ^
92.   <\??\C:\WINDOWS\system32\Drivers\KAVSafe.sys><Kingsoft Corporation>
    
93. [KNetWch / KNetWch][Running/System Start]
    
94.   <\??\C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KNetWch.SYS><Kingsoft Corporation>
    
95. [KWatch3 / KWatch3][Running/Auto Start]
    
96.   <\??\C:\WINDOWS\system32\drivers\KWatch3.SYS><Kingsoft Corporation>
    9 J/ l% h, A7 e6 c6 Q0 N
97. [ntptdb / ntptdb][Stopped/Auto Start]
    " m) Q3 R5 k" M0 _% W9 }  m( e
98.   <\??\C:\Documents and Settings\All Users\Application Data\Microsoft\Office\SYSTEM\ntptdb.sys><N/A>
    
99. [nv / nv][Running/Manual Start]
    
100.   <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
     ! B6 j& g" C' u; a  D3 X  r
101. [NVIDIA nForce RAID Driver / nvrd32][Running/Boot Start]
     
102.   <\SystemRoot\system32\DRIVERS\nvrd32.sys><NVIDIA Corporation>
     
103. [DDK PACKET Protocol / Packet][Running/Manual Start]
     1 X% B6 f1 x( Z8 u- p  e. d
104.   <system32\DRIVERS\ProtoDrv.sys><360安全中心>
     7 y$ _! D3 [% k2 ^! J
105. [pnduojtwbt / pnduojtwbt][Stopped/Boot Start]
     9 y- d) d/ i7 u% l7 _2 m
106.   <\SystemRoot\system32\drivers\pnduojtwbt.sys><N/A>
     
107. [Direct Parallel Link Driver / Ptilink][Running/Manual Start]
     + i/ L% I5 y/ ^$ r
108.   <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
     ' Z2 }) Q3 {$ `
109. [RsAntiSpyware / RsAntiSpyware][Stopped/Boot Start]
     ( ~: y! `- M: ?& }% C( N/ M
110.   <\SystemRoot\system32\drivers\RsBoot.sys><N/A>
     
111. [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start]
     9 ?3 v7 L$ d# w7 B, t0 h" v. `
112.   <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
     1 H8 f% l) ]3 k8 Y( h
113. [SafeBoxKrnl / SafeBoxKrnl][Running/System Start]
     . z: Q, a3 V# J
114.   <\??\C:\Program Files\360Safebox\SafeBoxKrnl.sys><360安全中心>
     
115. [Secdrv / Secdrv][Stopped/Manual Start]
     
116.   <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
     
117. [SATALink External Device Filter / SiRemFil][Running/Boot Start]
     
118.   <\SystemRoot\system32\DRIVERS\SiRemFil.sys><Silicon Image, Inc.>
     
119. [System Restore Filter Driver / sr][Stopped/Disabled]
     
120.   <system32\DRIVERS\sr.sys><N/A>
     2 ^8 R. t! G- j3 B( S: |- _3 ~) ?
121. [TesSafe / TesSafe][Stopped/Manual Start]
     & ?. U/ a" u9 n: F
122.   <\??\C:\WINDOWS\system32\TesSafe.sys><TENCENT>
     
123. [System Services / unzxzsrs][Stopped/Boot Start]
     ' z4 u( l; n7 O& }/ ]$ C2 j% B5 O- K
124.   <\SystemRoot\system32\drivers\unzxzsrs.sys><N/A>
     
125. [ViBus / ViBus][Stopped/Boot Start]
     
126.   <\SystemRoot\system32\DRIVERS\ViBus.sys><N/A>
     1 k+ Y6 _; ?" ]# g7 a
127. [World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start]
     ! a; j( S  D) L3 b
128.   <system32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>
     ; f6 n4 U4 p1 R* R7 y3 K; @) }6 |
129. [VIA SATA IDE Hot-plug Driver / xfilt][Running/Boot Start]
     
130.   <\SystemRoot\system32\DRIVERS\xfilt.sys><VIA Technologies,Inc>
     
131. [ATI Extend / zhibmaso][Stopped/Boot Start]
     
132.   <\SystemRoot\system32\drivers\zhibmaso.sys><N/A>
     
133. [Vimicro USB PC Camera (ZC0301PL) / ZSMC301b][Running/Manual Start]
     5 ?/ J4 q4 k% F$ V5 I; m) M) Z
134.   <System32\Drivers\usbVM31b.sys><Vimicro Corporation>
     6 o6 h5 b* s! w0 e" T
135. ==================================
     1 A$ F. \  y! |8 o3 I: o) i
136. 浏览器加载项
     
137. [Google Toolbar Helper]
     % f* i$ B* d# l( x, R( v- \9 Y
138.   {AA58ED58-01DD-4d91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     
139. [Google Toolbar Notifier BHO]
     
140.   {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll, Google Inc.>
     
141. [SafeMon Class]
     
142.   {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, 360.CN>
     
143. [kingsoft browser shield]
     
144.   {D963BE1A-6B35-47DB-B002-49FAE71D85CC} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KASBrowserShield.DLL, Kingsoft Corporation>
     ( r4 `# \' e9 ^1 F: X  m5 I+ L
145. [IEBuddyExtControl Class]
     
146.   {3AECD3C1-7085-4731-96DC-47B6CF7EF749} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddyExt.DLL, Kingsoft Corporation>
     
147. [Zcom 杂志]
     5 V7 M/ N3 k! _  V
148.   {4045D313-1D5E-4fe4-93A0-A34630B6A00B} <C:\Zcom\E-Space.exe, N/A>
     ( g% W5 C% K9 R- L1 b8 l, s
149. [&Google]
     & m) o; x' g$ E* \2 X* f3 W
150.   {2318C2B1-4965-11d4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     0 {& J1 I8 J; @# }' N! C
151. [KooPlayer Control]
     
152.   {C728DAB8-FDF5-4CD7-89DD-879D25794C77} <C:\WINDOWS\system32\CCTVKO~1.OCX, Koos>
     ) k  x8 \2 x7 X
153. [Shockwave Flash Object]
     7 t- k* ?) p5 |" a
154.   {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx, Adobe Systems, Inc.>
     
155. [KUpdateObj2 Class]
     
156.   {D82303B7-A754-4DCB-8AFC-8CF99435AACE} <C:\WINDOWS\system32\KingSoft\KOS\UpdateOcx2.dll, Kingsoft Corporation>
     - E* }8 J  B( i9 q" N( M! N
157. [Google Script Object]
     
158.   {00EF2092-6AC5-47C0-BD25-CF2D5D657FEB} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     ' E: e0 \9 O/ N# ]" e" d
159. [EWA Control]
     
160.   {18226BF8-DC0B-4D81-80E9-A41AE37BB73A} <C:\PROGRA~1\PPLive\SYNACA~2.OCX, Synacast>
     % Y) y3 C7 |; R0 D6 {
161. [Windows Media Player]
     
162.   {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\msdxm.ocx, Microsoft Corporation>
     1 Y' C7 J6 u6 \, o; k
163. [&Google]
     
164.   {2318C2B1-4965-11D4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     7 [( K- p+ W  `, x
165. [HTML Document]
     
166.   {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
     % @1 R! n( ]/ c" N+ K
167. [DHTML Edit Control Safe for Scripting for IE5]
     - i' w- U1 Y3 ^7 n  v+ g
168.   {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, Microsoft Corporation>
     
169. [RealPlayer RAM Download Handler]
     0 `4 H8 Y( L% T0 }% Y
170.   {2F542A2E-EDC9-4BF7-8CB1-87C9919F7F93} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
     7 r5 A  Q; \" Q3 l' o, M3 [
171. [IEBuddyExtControl Class]
     
172.   {3AECD3C1-7085-4731-96DC-47B6CF7EF749} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddyExt.DLL, Kingsoft Corporation>
     : \! V) T! e- q4 B
173. [XML Document]
     
174.   {48123BC4-99D9-11D1-A6B3-00C04FD91555} <C:\WINDOWS\system32\msxml3.dll, Microsoft Corporation>
     ) ]8 f: u# L& D4 e0 z) n9 [
175. [HHCtrl Object]
     
176.   {52A2AAAE-085D-4187-97EA-8C30DB990436} <C:\WINDOWS\system32\hhctrl.ocx, Microsoft Corporation>
     9 f5 F1 k2 t; f. t  M
177. [Windows Media Player]
     1 }: v4 J0 Q" n5 z5 I; V5 }6 @
178.   {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     
179. [Active Desktop Mover]
     9 t2 T/ k* ~2 y$ b
180.   {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A>
     
181. [360SafeLive]
     1 [/ Z  w( t" H! Y. V
182.   {87515F61-A66C-4319-A0E0-D416CB8059E3} <C:\Program Files\360safe\live.dll, 360.cn>
     
183. [Microsoft Web 浏览器]
     
184.   {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
     
185. [Browser Enhanced Objects]
     
186.   {986488AF-13D5-9DDF-4FEF-9FB88698CFC1} <C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\USERDATA\webbrowser_2011.dll, N/A>
     
187. [Google Toolbar Helper]
     
188.   {AA58ED58-01DD-4D91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     
189. [Microsoft Scriptlet Component]
     
190.   {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation>
     : r, n( G+ v" ]
191. [Google Toolbar Notifier BHO]
     ( M( J4 i" \1 s5 [2 m% U/ O7 [
192.   {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll, Google Inc.>
     
193. [SearchAssistantOC]
     
194.   {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
     4 [* s4 h. o3 |* Z* P! b; V, I8 o, D
195. [SafeMon Class]
     
196.   {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, 360.CN>
     
197. [RDS.DataSpace]
     
198.   {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
     
199. [KooPlayer Control]
     ( A+ b/ C* C" J: D% e! C% h& }; m0 ]
200.   {C728DAB8-FDF5-4CD7-89DD-879D25794C77} <C:\WINDOWS\system32\CCTVKO~1.OCX, Koos>
     
201. [AUDIO__MID Moniker Class]
     
202.   {CD3AFA74-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     - I! \4 p$ A4 C
203. [AUDIO__MP3 Moniker Class]
     % L7 e! h* c+ n# {% ?8 C
204.   {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     
205. [AUDIO__X_MS_WMA Moniker Class]
     
206.   {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     
207. [VIDEO__X_MS_WMV Moniker Class]
     
208.   {CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     4 k# ?& Z( d/ m
209. [RealPlayer G2 Control]
     
210.   {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
     ) V$ }7 k" A* z1 ~
211. [Shockwave Flash Object]
     
212.   {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx, Adobe Systems, Inc.>
     
213. [KUpdateObj2 Class]
     + }- G; E2 Y5 R' y
214.   {D82303B7-A754-4DCB-8AFC-8CF99435AACE} <C:\WINDOWS\system32\KingSoft\KOS\UpdateOcx2.dll, Kingsoft Corporation>
     
215. [kingsoft browser shield]
     ! l3 M5 {2 k6 S# Y( [
216.   {D963BE1A-6B35-47DB-B002-49FAE71D85CC} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KASBrowserShield.DLL, Kingsoft Corporation>
     
217. [PasswordEditCtrl Class]
     4 J/ V# D  J1 y  a
218.   {E787FD25-8D7C-4693-AE67-9406BC6E22DF} <C:\WINDOWS\system32\qqedit\qqedit.dll, 腾讯科技（深圳）有限公司>
     
219. [QvodCtrl Class]
     . s1 O& E$ G' U. h  r
220.   {F3D0D36F-23F8-4682-A195-74C92B03D4AF} <C:\Program Files\QvodPlayer\QvodInsert.dll, Shenzhen QVOD Technology Co.,Ltd>
     
221. [&使用超级旋风下载]
     
222.   <C:\Program Files\Tencent\QQDownload\geturl.htm, N/A>
     ; s( a$ f- t' t, F# l" O' l
223. [&使用超级旋风下载全部链接]
     
224.   <C:\Program Files\Tencent\QQDownload\getAllurl.htm, N/A>
     
225. [使用迅雷下载]
     6 z& F( g+ y- Y+ I& W; ?, Z8 _
226.   <, N/A>
     
227. [使用迅雷下载全部链接]
     3 F& b" l3 {: P
228.   <, N/A>
     
229. [导出到 Microsoft Office Excel(&X)]
     8 Q8 r. P7 L- v/ F8 k! F
230.   <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
     # V- t9 m/ J7 W: I9 N6 j) M" F- |
231. [添加到QQ表情]
     
232.   <C:\Program Files\Tencent\QQ\AddEmotion.htm, N/A>
     
233. ==================================
     
234. 正在运行的进程
     
235. [PID: 444 / SYSTEM][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     , ^+ H* U" R- W
236. [PID: 496 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     ; q. D4 P% t$ ^
237. [PID: 520 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
238.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
     
239. [PID: 564 / SYSTEM][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
240. [PID: 576 / SYSTEM][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
241. [PID: 720 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     6 U4 j9 u/ W1 x# l0 i
242. [PID: 780 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     # y$ v; G  H8 F  r
243. [PID: 856 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     5 a- Z" G& F' a& ^: V6 M
244. [PID: 944 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     % q! o4 f% j4 @% R- ~
245. [PID: 1012 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     0 g6 K6 S: h2 j  f# U
246. [PID: 1236 / Administrator][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_qfe.070613-1311)]
     / }3 k8 J) [: q4 r
247.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
248.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
249.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
     
250.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
251.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KAVEXT.DLL]  [Kingsoft Corporation, 2008,05,07,373]
     
252.     [C:\Program Files\Tencent\QQ\qdshm.dll]  [, 1, 0, 101, 20]
     
253.     [C:\Program Files\Tencent\QQ\MFC42.DLL]  [Microsoft Corporation, 6.00.8665.0]
     
254.     [C:\Program Files\WinRAR\rarext.dll]  [N/A, ]
     
255.     [C:\WINDOWS\system32\shlhook.dll]  [Beijing Rising Technology Co., Ltd., 4.0.0.9]
     
256.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
257.     [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
     
258. [PID: 1332 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
     3 k: f* M! `$ P% _- j! y
259.     [C:\WINDOWS\system32\mdimon.dll]  [Microsoft Corporation, 11.3.8166.2]
     * C4 t/ P" z4 ?- @: h  `" z
260.     [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll]  [Microsoft Corporation, 11.3.8166.2]
     ( }+ w. N' i% J* T, d9 J. i
261. [PID: 1540 / Administrator][C:\Program Files\360safe\AntiArp\AntiArp.exe]  [360安全中心, 2, 0, 0, 1008]
     / g( k% a9 k- O4 |4 W
262.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     2 _0 f: y1 @: `/ T1 G3 w5 b! h
263.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     1 a) W% s& j, F' d6 p9 @
264.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     1 }( W' I( X2 S0 G
265.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
266. [PID: 1560 / Administrator][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
267.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
268.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
269.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
270. [PID: 1576 / Administrator][C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe]  [Google Inc., 2, 0, 301, 1654]
     $ r5 g# h& O- M- J3 B, o, |
271.     [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\gtn.dll]  [Google Inc., 2, 0, 301, 7164]
     
272.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     / Z8 I5 D3 e3 n: s$ d
273.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
274.     [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\res_zh-CN.dll]  [Google Inc., 2, 0, 301, 7164]
     5 @* q0 L, e* ^& {0 e
275.     [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll]  [Google Inc., 2, 0, 301, 7164]
     9 i' x6 f/ V1 @! s
276.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
277.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     * ~& g; `/ v; ?8 y6 e  {
278. [PID: 1648 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     - \% p! H- j/ _" S7 @% H# y
279. [PID: 1744 / SYSTEM][C:\Program Files\QvodPlayer\QvodTerminal.exe]  [Shenzhen QVOD Technology Co.,Ltd, 2, 5, 0, 53]
     
280. [PID: 1860 / SYSTEM][C:\WINDOWS\system32\skeys.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     5 y+ G* p5 N* x
281. [PID: 1908 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     . ~  I) i. A. L4 }# A0 T: v
282. [PID: 1964 / LOCAL SERVICE][C:\WINDOWS\system32\wdfmgr.exe]  [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
     
283. [PID: 2772 / Administrator][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
     
284.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
285.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     " I% e0 |3 L: m
286.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
287.     [c:\program files\google\googletoolbar2.dll]  [Google Inc., 4, 0, 1606, 6690]
     ) ]8 a( c- \9 T' F) `
288.     [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll]  [Google Inc., 2, 0, 301, 7164]
     
289.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KASBrowserShield.DLL]  [Kingsoft Corporation, 2008,04,15,2]
     . V. o0 v; `3 ]" c& e* O
290.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddy.dll]  [Kingsoft Corporation, 2008,04,15,2]
     
291.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddyExt.DLL]  [Kingsoft Corporation, 2008,05,14,83]
     3 R$ [6 j& x' E( Q% H' h9 h0 ?7 m! Q" y
292.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KANTray.dll]  [Kingsoft Corporation, 2008,04,15,2]
     + ?; X* P/ t* |0 O  t  Y. {
293.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KAVAFish.DLL]  [Kingsoft Corporation, 2008,05,13,78]
     
294.     [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
     , D/ K9 E, r6 R1 k  m% Z, K
295.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
     6 |5 q( y: ]; s/ r3 }, I" e
296.     [C:\WINDOWS\system32\WN.IME]  [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
     
297.     [C:\Program Files\ShiQiang\wnime\Dll32\wnpy_StatusWnd.dll]  [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
     
298.     [C:\Program Files\ShiQiang\wnime\Dll32\wnpy_CompWnd.dll]  [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
     
299.     [C:\Program Files\ShiQiang\wnime\Dll32\wnpy_Query.dll]  [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
     . _- }6 |& A# d. c( C4 S0 Z: y
300.     [C:\WINDOWS\system32\SOGOUPY.IME]  [Sogou.com Inc., 3.2.0.0]
     
301.     [C:\Documents and Settings\Administrator\My Documents\SogouInput\Plugin\SgImeWord.dll]  [Sogou.com Inc., 3.2.0.0]
     . ?, r" e. U4 b! v
302.     [C:\WINDOWS\system32\WINWB98.IME]  [Microsoft Corporation, 4.00.950]
     
303.     [C:\WINDOWS\system32\WINWB86.IME]  [Microsoft Corporation, 4.00.950]
     
304.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
305. [PID: 1124 / Administrator][C:\Program Files\Tencent\QQ\TXPlatform.exe]  [Tencent, 1, 0, 170, 0]
     
306.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
307.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
308.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
309.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
310. [PID: 928 / Administrator][F:\arvmon.exe]  [任软工作室, 2.2.5.201]
     
311.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
312.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
       P6 C0 c4 D& M4 M
313.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     : ~1 m4 V# |4 L* N# o4 H& J  F
314.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
315.     [F:\Vdata.dll]  [任软工作室, 2, 2, 1, 94]
     " E3 J. a* T7 V
316. [PID: 2540 / Administrator][F:\AutoGuarder.exe]  [任软工作室, 2.2.5.201]
     
317.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     5 o6 K$ t2 z2 s
318.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     1 G% N5 S0 S  ?6 S: j
319.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     : R: a+ R& N* w% H9 A( ]+ e# u" \
320.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     / k4 d& j# U' S; Z0 }& n6 w5 H  I
321. [PID: 2476 / Administrator][d:\我的文档\桌面\系统检测修复\SREngPS.EXE]  [Smallfrogs Studio, 2.5.16.900]
     1 K9 y9 k; V! U  f( I
322.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     % X6 {2 p' b# c( B) I1 a0 y* c
323.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     # W" J( F: _+ b4 X6 \8 ]0 H3 O
324.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
325.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
326.     [d:\我的文档\桌面\系统检测修复\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]
     2 i, E+ V! D$ q! g2 W
327. ==================================
     
328. 文件关联
     8 P- R9 c4 A; A; Y) d
329. .TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
     
330. .EXE  OK. ["%1" %*]
     $ Z+ p$ h' |( z9 j( D. `
331. .COM  OK. ["%1" %*]
     : v: C$ f* G% ~
332. .PIF  OK. ["%1" %*]
     ) K+ n+ o0 H# i' p( e6 f4 w. q
333. .REG  OK. [regedit.exe "%1"]
     
334. .BAT  OK. ["%1" %*]
     2 k1 W$ t, J- ]! P' B; Z
335. .SCR  OK. ["%1" /S]
     6 [% n4 z0 h! s
336. .CHM  OK. ["C:\WINDOWS\hh.exe" %1]
     
337. .HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
     + ~  e% H$ S/ q" y5 B  n
338. .INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
     
339. .INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
     , G, F& m( R. n4 Y
340. .VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
     4 X6 Z* a: A; p: y) l+ o
341. .JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
     
342. .LNK  OK. [{00021401-0000-0000-C000-000000000046}]
     
343. ==================================
     
344. Winsock 提供者
     
345. N/A
     
346. ==================================
     
347. Autorun.inf
     ! ~0 t* u: P, {6 ]& }! u( y3 T5 D' |
348. N/A
     # i7 G$ S" \+ `5 ^, s& [  `
349. ==================================
     3 I" j/ A0 E. M4 v! S& X0 _
350. HOSTS 文件
     
351. N/A
     
352. ==================================
     * z# [# x" ?2 q7 |0 \1 O- B& D8 v
353. 进程特权扫描
     / V8 x9 r7 E8 ]; \
354. 特殊特权被允许： SeLoadDriverPrivilege [PID = 520, C:\WINDOWS\SYSTEM32\WINLOGON.EXE]
     ' V9 N- u& j8 h+ e- s# A! \
355. 特殊特权被允许： SeDebugPrivilege [PID = 928, F:\ARVMON.EXE]
     . e% t/ r" f1 R( ~/ d2 f5 }* Z* z
356. 特殊特权被允许： SeLoadDriverPrivilege [PID = 928, F:\ARVMON.EXE]
     
357. 特殊特权被允许： SeDebugPrivilege [PID = 2540, F:\AUTOGUARDER.EXE]
     . C, r9 _2 ?# c% I7 ]/ f& Z
358. 特殊特权被允许： SeLoadDriverPrivilege [PID = 2540, F:\AUTOGUARDER.EXE]
     & M" i+ }$ M/ i0 J' `. u2 q6 P
359. ==================================
     : G3 j- L) W( J5 l
360. API HOOK
     8 p, A- Q3 T  B# I0 S& X
361. N/A
     ; V  u5 j; m4 }" P
362. ==================================
     3 [! A4 a2 Q* m6 x
363. 隐藏进程
     * H$ n5 Q5 S: S( O9 L. _8 [
364. N/A
       F$ t6 v' }5 |9 j( s
365. ==================================
     9 ?. v8 T% f/ s# B' I
366. 
     

复制代码

傲天♂扬帆

跟原始说了，不知道能不能看明白。。。

傲天♂元始

[Start]
6 B4 l4 b/ ?' r9 T% N
2008-05-22,22:24:21

9 Z9 o! [& O; U; Y" I7 aSREngLOG智能分析专家 V1.2.0.125
Tored (http://hi.baidu.com/peaset)

======================================================
以下过程将用到SREng、PowerRmv，如果您不熟悉这两款工具的使用方法，请参考下列链接：
: j# s& U) d$ p. _# `SREng详细操作方法： http://hi.baidu.com/peaset/blog/ ... dd19224e4aeadf.html
PowerRmv详细操作方法： http://hi.baidu.com/peaset/blog/ ... 6fb5eb77c63816.html
4 {# f4 p; H' D/ z" a======================================================

以下是病毒清除步骤：

1、用PowerRmv删除以下文件(没有则跳过)：
- @! O5 B- @4 G8 J  ]1 s
; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
;
; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
C:\WINDOWS\System32\3wareSrv.exe
\SystemRoot\C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll
) ]1 J9 j' q7 t/ i* R
1 Y1 ^: l" t9 m! B4 l" E\SystemRoot\System32\DRIVERS\22jn.sys
\SystemRoot\System32\DRIVERS\43ecu.sys
\??\C:\Documents and Settings\All Users\Application Data\Microsoft\Office\SYSTEM\ntptdb.sys
4 H: o" x$ h5 T\SystemRoot\system32\drivers\pnduojtwbt.sys
1 ^% B8 e/ W3 H* a! ^# G, O\SystemRoot\system32\drivers\RsBoot.sys
/ M- U  L* }& {system32\DRIVERS\sr.sys
\SystemRoot\system32\drivers\unzxzsrs.sys
  p4 S2 Z; z) i/ g: p. m\SystemRoot\system32\DRIVERS\ViBus.sys
\SystemRoot\system32\drivers\zhibmaso.sys

2、用SREng删除以下【注册表】项(没有则跳过)：
. O" s. S/ r" f; d6 i) b
<IMJPMIG8.1>
<PHIME2002A>
<PHIME2002ASync>

3、用SREng删除【所有启动文件夹】内容(没有则跳过)

- E2 n& H8 M) A% [( H8 [4、用SREng删除以下【服务】项(没有则跳过)：
; z1 ?( q3 b$ `' ^" h% F
[3ware Controller Service / 3wareSrv]
[NetMeeting Remote Desktop Sharing / mnmsrvc]

5、用SREng删除以下【驱动程序】项(没有则跳过)：
. c5 |. n" R1 V$ V0 M
6 E& @9 @* p2 e: b8 v[22j / 22jn]
[43ec / 43ecu]
2 ]3 @0 d5 ^( F) S[ntptdb / ntptdb]
8 s7 {: H% x' j5 H; {7 |[pnduojtwbt / pnduojtwbt]
[RsAntiSpyware / RsAntiSpyware]
! l2 c  M) u- t, e7 k# ^[System Restore Filter Driver / sr]
- E2 G+ b2 \3 f7 G  }9 k6 {[System Services / unzxzsrs]
  P$ I% u9 O  [" s& K2 s0 o9 q5 E[ViBus / ViBus]
[ATI Extend / zhibmaso]

6、用SREng删除以下【浏览器加载项】项(没有则跳过)：

) d+ S7 p& k% m7 q/ `[Zcom 杂志]
9 |2 C- z( [* b5 a[Browser Enhanced Objects]
; \5 E. y- c# `
最后,重新启动计算机.Tored祝您好运!
======================================================
[End]

傲天♂元始

你就这样弄，不行我也没办法

傲天♂扬帆

独恋有按原始说的重新操作一次吗？

独恋伊影

找不到要删的文件。。。。

傲天♂元始

有些都是隐藏起来的

傲天♂风云

2 d6 X/ _. S: _
我对代码 一点都不懂

傲天♂元始

。。。这不是代码只是系统的扫描日志而已

傲天♂冷漠

我汗~~~
+ p; B9 D! N* [& w) A$ c8 i3 T, U$ b这么多代码~~~