在这里

独恋伊影

1. 
   
2. 2008-05-22,20:37:43
   
3. System Repair Engineer 2.5.16.900
   0 |/ G9 G3 Z: C+ {5 T1 X5 M# o
4. Smallfrogs (http://www.KZTechs.com)
   
5. Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能
   
6. 以下内容被选中：
   
7.     所有的启动项目（包括注册表、启动文件夹、服务等）
   
8.     浏览器加载项
   7 t$ }( F1 B: n, z1 E, A# w* K; g
9.     正在运行的进程（包括进程模块信息）
   
10.     文件关联
    3 g& N, ^5 |9 F- `
11.     Winsock 提供者
    0 o$ ]! C6 F( ]' I' t; F; C
12.     Autorun.inf
    # {, ^! b3 m# K
13.     HOSTS 文件
    
14.     进程特权扫描
    % e0 U$ }& D" Q
15. 
    
16. 启动项目
    ) K4 e: Z% w3 f/ ~
17. 注册表
    9 I$ e# k6 D* p
18. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    
19.     <ctfmon.exe><C:\WINDOWS\system32\CTFMON.EXE>  [(Verified)Microsoft Windows Publisher]
    
20. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    
21.     <360Safebox><"C:\Program Files\360Safebox\safeboxTray.exe" /r>  [(Verified)Qizhi Software (beijing) Co. Ltd]
    
22.     <360Safetray><C:\Program Files\360safe\safemon\360tray.exe /start>  [(Verified)Qizhi Software (beijing) Co. Ltd]
    
23.     <360Antiarp><C:\Program Files\360safe\AntiArp\AntiArp.exe /start>  [(Verified)Qizhi Software (beijing) Co. Ltd]
    ' Y" ~) H5 Z6 S8 I; y0 t
24.     <KavStart><"C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KAVStart.exe" -startup>  [(Verified)KINGSOFT CORPORATION]
    $ v8 S& k" S% ~' g! Z$ W" `+ q
25.     <IMJPMIG8.1><; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32>  [N/A]
    7 Q9 V% l9 d7 u$ K' G+ V" x/ j
26.     <PHIME2002A><; >  [N/A]
    5 T. x/ L1 K7 a) Y8 B
27.     <PHIME2002ASync><; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32>  [N/A]
    
28. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    
29.     <shell><Explorer.exe>  [(Verified)Microsoft Windows Component Publisher]
    7 S1 N8 X  N% h1 y/ q; v" Z
30.     <Userinit><C:\WINDOWS\system32\UserInit.exe,>  [(Verified)Microsoft Windows Publisher]
    ! ]5 e- p. [2 z7 ]% Y4 g3 Q) t' d. Y8 j
31.     <UIHost><logonui.exe>  [(Verified)Microsoft Windows Publisher]
    - d" q; B  j' v  F
32. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    
33.     <{AC2DC2EF-5165-40A3-8CDF-41DCA1B0901A}><C:\WINDOWS\system32\shlhook.dll>  [Beijing Rising Technology Co., Ltd.]
    
34. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
    , y: T' K- F4 }$ B; n$ ~; a
35.     <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE>  [N/A]
    9 N2 H: ]5 L  Q5 Q7 ?1 S5 v% J
36. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
    
37.     <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [N/A]
    
38. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
    ! v2 P) h9 `$ }3 B
39.     <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [N/A]
    
40. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
    $ b' I" i+ @$ R. t+ _
41.     <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [N/A]
    ; k, w  Z* t% G* Z9 X- d  j) N9 `9 l' F
42. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
    ' q2 |+ ]2 U$ |+ T& |
43.     <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Remove.PerUser.NT>  [(Verified)Microsoft Windows Publisher]
    
44. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
    / ~( A" T; R1 Z+ m- F
45.     <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser>  [(Verified)Microsoft Windows Publisher]
    9 I" [3 _& q7 \$ X4 ~' z
46. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
    
47.     <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp10.inf,PerUserStub>  [(Verified)Microsoft Windows Publisher]
    
48. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
    
49.     <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [N/A]
    , v( r; K$ x3 Q6 o7 x
50. ==================================
    6 }$ `$ \1 y+ i9 K0 s* v/ U) X
51. 启动文件夹
    
52. N/A
    ; J4 |1 I7 z5 p$ w8 C: b
53. ==================================
    
54. 服务
    - ], w" \0 l% F- v  R+ i0 h; {
55. [3ware Controller Service / 3wareSrv][Stopped/Auto Start]
    
56.   <C:\WINDOWS\System32\3wareSrv.exe><N/A>
    
57. [Google Updater Service / gusvc][Stopped/Manual Start]
    5 K$ r6 ~( B" E# P
58.   <"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"><Google>
    
59. [Help and Support / helpsvc][Stopped/Disabled]
    
60.   <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll><N/A>
    " Q1 k7 f* o% A  Z/ W4 a9 U
61. [Human Interface Device Access / HidServ][Stopped/Boot Start]
    . R1 y  g/ D! J+ f  L
62.   <\SystemRoot\C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
    / z$ B6 O( i( }- V# P7 o8 K
63. [Kingsoft Internet Security Common Service / KISSvc][Stopped/Auto Start]
    
64.   <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KISSvc.EXE><Kingsoft Corporation>
    
65. [Kingsoft Personal Firewall Service / KPfwSvc][Running/Auto Start]
    
66.   <"C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KPfwSvc.EXE"><Kingsoft Corporation>
    % Y0 _! |! v, ?; ?  W, @# M8 Z2 }
67. [Kingsoft Antivirus KWatch Service / KWatchSvc][Running/Auto Start]
    4 {1 ~# P: n6 x, F/ u5 R
68.   <"C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KWatch.EXE"><Kingsoft Corporation>
    
69. [NetMeeting Remote Desktop Sharing / mnmsrvc][Stopped/Manual Start]
    ) x. u* D, B6 a2 v% R- T/ J
70.   <><N/A>
    
71. [Qvod Terminal / Qvod Terminal][Running/Auto Start]
    
72.   <C:\Program Files\QvodPlayer\QvodTerminal.exe><Shenzhen QVOD Technology Co.,Ltd>
    ' I4 d6 T, X2 w3 D5 {2 O
73. ==================================
    
74. 驱动程序
    * F- Q7 S. V" d
75. [22j / 22jn][Stopped/Boot Start]
    6 i# p; h3 i: X: }( E# i& U/ C: r' L
76.   <\SystemRoot\System32\DRIVERS\22jn.sys><N/A>
    9 l7 A0 f5 ~1 W& E# C5 u( E0 S2 S# e
77. [360AntiArp / 360AntiArp][Running/System Start]
    4 e- x7 a' s* g& N' a3 ]; F
78.   <\??\C:\WINDOWS\system32\drivers\360AntiArp.sys><360安全中心>
    ; H& {9 i; T. L" R( d) i
79. [43ec / 43ecu][Stopped/Boot Start]
    
80.   <\SystemRoot\System32\DRIVERS\43ecu.sys><N/A>
    
81. [Intel(r) 82801 Audio Driver Install Service (WDM) / ac97intc][Running/Manual Start]
    
82.   <system32\drivers\ac97intc.sys><Intel Corporation>
    
83. [Promise driver accelerator / bb-run][Running/Boot Start]
    
84.   <\SystemRoot\system32\DRIVERS\bb-run.sys><Promise Technology, Inc.>
    
85. [Promise Removable Disk Control Driver / dontgo][Running/Boot Start]
    
86.   <\SystemRoot\system32\DRIVERS\DontGo.sys><Promise Technology, Inc.>
    / b% c2 i" H3 Y% K' @" v
87. [KAVBase / KAVBase][Running/Auto Start]
      }4 J8 y! m2 f: Z( ^
88.   <\??\C:\WINDOWS\system32\Drivers\KAVBase.sys><Kingsoft Corporation>
    ) [2 V) e: v: \) a0 @- P. G, X' Z
89. [KAVBootC / KAVBootC][Running/Boot Start]
    
90.   <\SystemRoot\system32\Drivers\KAVBootC.sys><Kingsoft Corporation>
    
91. [KAVSafe / KAVSafe][Running/Auto Start]
    % d4 ^* j( g4 f$ u7 q3 y0 x
92.   <\??\C:\WINDOWS\system32\Drivers\KAVSafe.sys><Kingsoft Corporation>
    9 k6 v- V4 k8 S5 F" v3 P+ U
93. [KNetWch / KNetWch][Running/System Start]
    
94.   <\??\C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KNetWch.SYS><Kingsoft Corporation>
    7 Y; a& ~" T0 O5 M
95. [KWatch3 / KWatch3][Running/Auto Start]
    
96.   <\??\C:\WINDOWS\system32\drivers\KWatch3.SYS><Kingsoft Corporation>
    ( ~$ [6 r- C2 d, W1 \; M& W
97. [ntptdb / ntptdb][Stopped/Auto Start]
    5 U) a" |% g9 c4 l% p
98.   <\??\C:\Documents and Settings\All Users\Application Data\Microsoft\Office\SYSTEM\ntptdb.sys><N/A>
    & N% Q" Y; I. }( G6 i- L
99. [nv / nv][Running/Manual Start]
    
100.   <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
     
101. [NVIDIA nForce RAID Driver / nvrd32][Running/Boot Start]
     
102.   <\SystemRoot\system32\DRIVERS\nvrd32.sys><NVIDIA Corporation>
     / C# m! @1 h# s7 g8 y" A1 H
103. [DDK PACKET Protocol / Packet][Running/Manual Start]
     
104.   <system32\DRIVERS\ProtoDrv.sys><360安全中心>
     
105. [pnduojtwbt / pnduojtwbt][Stopped/Boot Start]
     
106.   <\SystemRoot\system32\drivers\pnduojtwbt.sys><N/A>
     7 |) n0 u* X  k( ~
107. [Direct Parallel Link Driver / Ptilink][Running/Manual Start]
       G8 S: P* |$ i7 ?. t
108.   <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
     + t0 q! l5 P: ]; ~$ @8 A- g
109. [RsAntiSpyware / RsAntiSpyware][Stopped/Boot Start]
     + E. W* \: Q; E% C! `) `2 M% Q8 N3 k0 n
110.   <\SystemRoot\system32\drivers\RsBoot.sys><N/A>
     6 r! t# I2 K% G% r1 t% r0 s1 I
111. [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start]
     
112.   <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
     1 ]. B3 L' p& Y+ ]
113. [SafeBoxKrnl / SafeBoxKrnl][Running/System Start]
     , M3 |" f% l& w' E' M
114.   <\??\C:\Program Files\360Safebox\SafeBoxKrnl.sys><360安全中心>
     7 _) b% Y9 }, @' m3 M. v
115. [Secdrv / Secdrv][Stopped/Manual Start]
     
116.   <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
     , q3 h8 }3 m9 x3 S, T6 F' Y
117. [SATALink External Device Filter / SiRemFil][Running/Boot Start]
     
118.   <\SystemRoot\system32\DRIVERS\SiRemFil.sys><Silicon Image, Inc.>
     
119. [System Restore Filter Driver / sr][Stopped/Disabled]
     6 _  c8 F  p8 }* E
120.   <system32\DRIVERS\sr.sys><N/A>
     0 ?9 o  y2 J- w7 H6 P
121. [TesSafe / TesSafe][Stopped/Manual Start]
     $ j1 N' b# F0 y% Y
122.   <\??\C:\WINDOWS\system32\TesSafe.sys><TENCENT>
     
123. [System Services / unzxzsrs][Stopped/Boot Start]
     3 d5 y& C$ N6 m& t; t) D9 {' |; v9 b
124.   <\SystemRoot\system32\drivers\unzxzsrs.sys><N/A>
     $ w, \! w) R3 k4 C3 g+ e8 ~0 m
125. [ViBus / ViBus][Stopped/Boot Start]
     
126.   <\SystemRoot\system32\DRIVERS\ViBus.sys><N/A>
     ' Z! [# v- m2 [
127. [World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start]
     & ?- M% v8 _5 k
128.   <system32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>
     / B7 [% T" M% z7 V2 ?8 v. Z9 t  }% u8 H
129. [VIA SATA IDE Hot-plug Driver / xfilt][Running/Boot Start]
     ; h* R- n$ n, n' A' S- _
130.   <\SystemRoot\system32\DRIVERS\xfilt.sys><VIA Technologies,Inc>
     
131. [ATI Extend / zhibmaso][Stopped/Boot Start]
     9 V; @# u/ s% n# J' C/ F$ R
132.   <\SystemRoot\system32\drivers\zhibmaso.sys><N/A>
     
133. [Vimicro USB PC Camera (ZC0301PL) / ZSMC301b][Running/Manual Start]
     
134.   <System32\Drivers\usbVM31b.sys><Vimicro Corporation>
     
135. ==================================
     7 g9 O+ b' @" b7 C' p/ W% f. F9 t2 q
136. 浏览器加载项
     % b3 L3 x- G# t" ]7 j' T
137. [Google Toolbar Helper]
     
138.   {AA58ED58-01DD-4d91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     
139. [Google Toolbar Notifier BHO]
     
140.   {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll, Google Inc.>
     ( p3 v) B' L- p5 g1 X) K
141. [SafeMon Class]
     
142.   {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, 360.CN>
     
143. [kingsoft browser shield]
     ) e7 S9 f* x+ T( u
144.   {D963BE1A-6B35-47DB-B002-49FAE71D85CC} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KASBrowserShield.DLL, Kingsoft Corporation>
     + k5 {; r# z8 H+ `# v: ^
145. [IEBuddyExtControl Class]
     ' o3 U: _7 ]; S+ |9 v
146.   {3AECD3C1-7085-4731-96DC-47B6CF7EF749} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddyExt.DLL, Kingsoft Corporation>
     
147. [Zcom 杂志]
     
148.   {4045D313-1D5E-4fe4-93A0-A34630B6A00B} <C:\Zcom\E-Space.exe, N/A>
     
149. [&Google]
     
150.   {2318C2B1-4965-11d4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     
151. [KooPlayer Control]
     
152.   {C728DAB8-FDF5-4CD7-89DD-879D25794C77} <C:\WINDOWS\system32\CCTVKO~1.OCX, Koos>
     5 z# s+ Q  L& |3 }0 F# K% P$ Z
153. [Shockwave Flash Object]
     3 @' Z3 M6 \+ Y8 k, c# P4 T+ C0 \
154.   {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx, Adobe Systems, Inc.>
     4 k' _1 f+ v9 m9 M/ X7 H7 z
155. [KUpdateObj2 Class]
     
156.   {D82303B7-A754-4DCB-8AFC-8CF99435AACE} <C:\WINDOWS\system32\KingSoft\KOS\UpdateOcx2.dll, Kingsoft Corporation>
     ; f! D  B& b. z7 k8 @
157. [Google Script Object]
     
158.   {00EF2092-6AC5-47C0-BD25-CF2D5D657FEB} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     # n  Q5 b( d" `* L+ ], K# y  a
159. [EWA Control]
     
160.   {18226BF8-DC0B-4D81-80E9-A41AE37BB73A} <C:\PROGRA~1\PPLive\SYNACA~2.OCX, Synacast>
     
161. [Windows Media Player]
     + D4 v7 z- _2 M4 M! e
162.   {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\msdxm.ocx, Microsoft Corporation>
     $ J/ _4 u0 e+ U
163. [&Google]
     . q- m; b( _; Q
164.   {2318C2B1-4965-11D4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     " l5 C3 N0 _; ?: U" H5 L5 }$ u
165. [HTML Document]
     
166.   {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
     ! I0 `3 ^8 ?, C0 c
167. [DHTML Edit Control Safe for Scripting for IE5]
     
168.   {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, Microsoft Corporation>
     + l- y3 E2 G, ~' A
169. [RealPlayer RAM Download Handler]
     
170.   {2F542A2E-EDC9-4BF7-8CB1-87C9919F7F93} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
     
171. [IEBuddyExtControl Class]
     
172.   {3AECD3C1-7085-4731-96DC-47B6CF7EF749} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddyExt.DLL, Kingsoft Corporation>
     
173. [XML Document]
     . k6 e) a8 M' c8 P7 ?/ s0 E
174.   {48123BC4-99D9-11D1-A6B3-00C04FD91555} <C:\WINDOWS\system32\msxml3.dll, Microsoft Corporation>
     8 m. `" i5 U1 u+ a+ I
175. [HHCtrl Object]
     - b2 {; F- {! J  m3 I+ l
176.   {52A2AAAE-085D-4187-97EA-8C30DB990436} <C:\WINDOWS\system32\hhctrl.ocx, Microsoft Corporation>
     
177. [Windows Media Player]
     9 D" }, V" @; R
178.   {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     8 R3 o, X9 C0 k6 B! E; `/ A
179. [Active Desktop Mover]
     
180.   {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A>
     * P0 J/ m8 r* D1 x" z$ H
181. [360SafeLive]
     / }8 Z- s' l, I: n
182.   {87515F61-A66C-4319-A0E0-D416CB8059E3} <C:\Program Files\360safe\live.dll, 360.cn>
     4 B/ i/ O$ K+ ~1 d. M
183. [Microsoft Web 浏览器]
     
184.   {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
     # f' @; s8 U6 P' @8 R, v
185. [Browser Enhanced Objects]
     
186.   {986488AF-13D5-9DDF-4FEF-9FB88698CFC1} <C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\USERDATA\webbrowser_2011.dll, N/A>
     & u" U$ S$ f: i: j+ b$ ~) ^1 @
187. [Google Toolbar Helper]
     " B8 h& ~" z' |* r1 y/ c* b
188.   {AA58ED58-01DD-4D91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, Google Inc.>
     ; V1 z) s: j5 y* ^3 d9 C9 |
189. [Microsoft Scriptlet Component]
     
190.   {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation>
     
191. [Google Toolbar Notifier BHO]
     
192.   {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll, Google Inc.>
     8 z- F- F) v% \" F
193. [SearchAssistantOC]
     
194.   {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
     $ `& T9 f/ ]: Y/ M+ a. l# r
195. [SafeMon Class]
     
196.   {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, 360.CN>
     4 e& O6 L. b' ?: U' K/ H
197. [RDS.DataSpace]
     
198.   {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
     
199. [KooPlayer Control]
     
200.   {C728DAB8-FDF5-4CD7-89DD-879D25794C77} <C:\WINDOWS\system32\CCTVKO~1.OCX, Koos>
     
201. [AUDIO__MID Moniker Class]
     4 M1 M! F0 G0 q! @9 m! y) ~
202.   {CD3AFA74-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     
203. [AUDIO__MP3 Moniker Class]
     % e1 X6 L2 z) ~) s$ V0 L
204.   {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     # M. B2 C0 s# E# w$ d; f
205. [AUDIO__X_MS_WMA Moniker Class]
     
206.   {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     $ v/ Z2 `9 \7 i7 X8 p9 G2 k6 c) H
207. [VIDEO__X_MS_WMV Moniker Class]
     
208.   {CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
     9 N* n' ]# M, t6 f2 _' p) s3 A
209. [RealPlayer G2 Control]
     9 P, \8 `/ z; n5 r( ?) t/ N8 [" W
210.   {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
     5 q, F7 G. B% b& o$ G: Y6 O
211. [Shockwave Flash Object]
     5 M  U+ G8 f( ?0 r$ Z9 S
212.   {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx, Adobe Systems, Inc.>
     
213. [KUpdateObj2 Class]
     
214.   {D82303B7-A754-4DCB-8AFC-8CF99435AACE} <C:\WINDOWS\system32\KingSoft\KOS\UpdateOcx2.dll, Kingsoft Corporation>
     
215. [kingsoft browser shield]
     
216.   {D963BE1A-6B35-47DB-B002-49FAE71D85CC} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KASBrowserShield.DLL, Kingsoft Corporation>
     4 n+ G5 |: y2 L/ x
217. [PasswordEditCtrl Class]
     ) U! ]: J; E! |& W5 g  N6 j* T' q
218.   {E787FD25-8D7C-4693-AE67-9406BC6E22DF} <C:\WINDOWS\system32\qqedit\qqedit.dll, 腾讯科技（深圳）有限公司>
     
219. [QvodCtrl Class]
     " j" y, ^( ]! F% m8 U3 L
220.   {F3D0D36F-23F8-4682-A195-74C92B03D4AF} <C:\Program Files\QvodPlayer\QvodInsert.dll, Shenzhen QVOD Technology Co.,Ltd>
       v- S3 b) `+ s0 e. e1 N- x/ p
221. [&使用超级旋风下载]
     # Y( e. Q: m# ^1 P$ V1 g0 V4 W
222.   <C:\Program Files\Tencent\QQDownload\geturl.htm, N/A>
     
223. [&使用超级旋风下载全部链接]
     & u- A8 N4 z0 _6 K( i+ `
224.   <C:\Program Files\Tencent\QQDownload\getAllurl.htm, N/A>
     
225. [使用迅雷下载]
     # |0 K& y3 H, w& @  J6 @
226.   <, N/A>
       G" i, d& t- e$ K! a' h, I3 p
227. [使用迅雷下载全部链接]
     
228.   <, N/A>
     
229. [导出到 Microsoft Office Excel(&X)]
     6 v# _3 b/ o$ o9 s/ Q9 @
230.   <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
     & p  j( K  a3 v7 p: h0 e! t
231. [添加到QQ表情]
     
232.   <C:\Program Files\Tencent\QQ\AddEmotion.htm, N/A>
     
233. ==================================
     
234. 正在运行的进程
     5 i$ [$ o- q$ {$ |
235. [PID: 444 / SYSTEM][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
236. [PID: 496 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
237. [PID: 520 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
238.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
     
239. [PID: 564 / SYSTEM][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     ) \4 W2 |. e& p  r2 J
240. [PID: 576 / SYSTEM][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     3 d0 @1 }+ P  _; m, q
241. [PID: 720 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
242. [PID: 780 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     1 T$ U9 d. h2 k* ]
243. [PID: 856 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
244. [PID: 944 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     4 o/ @" `7 J4 v) B$ g4 F. @& U
245. [PID: 1012 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     / _  t& u0 [6 W& _5 @5 u; T0 s% B
246. [PID: 1236 / Administrator][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_qfe.070613-1311)]
     
247.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     ' w: f( X) V- N  T( Q! `7 m
248.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
249.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
     
250.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
251.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KAVEXT.DLL]  [Kingsoft Corporation, 2008,05,07,373]
     
252.     [C:\Program Files\Tencent\QQ\qdshm.dll]  [, 1, 0, 101, 20]
     & d! K7 ?& y& G# @
253.     [C:\Program Files\Tencent\QQ\MFC42.DLL]  [Microsoft Corporation, 6.00.8665.0]
     
254.     [C:\Program Files\WinRAR\rarext.dll]  [N/A, ]
     " N! ^# |- N' X& I% y
255.     [C:\WINDOWS\system32\shlhook.dll]  [Beijing Rising Technology Co., Ltd., 4.0.0.9]
     - ^; g- r1 P0 n. D2 o
256.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
257.     [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
     . i- u* F' h: f9 T7 x: F6 s
258. [PID: 1332 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
     
259.     [C:\WINDOWS\system32\mdimon.dll]  [Microsoft Corporation, 11.3.8166.2]
     
260.     [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll]  [Microsoft Corporation, 11.3.8166.2]
     
261. [PID: 1540 / Administrator][C:\Program Files\360safe\AntiArp\AntiArp.exe]  [360安全中心, 2, 0, 0, 1008]
     
262.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     ; k6 p- t& d( {# n" x3 x, N
263.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
264.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
265.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     " }4 }6 k7 I  s
266. [PID: 1560 / Administrator][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
267.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
268.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     5 q9 E; y+ F0 v3 d3 w  M. m
269.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     / l+ {& T  o4 z% o; z! s$ }, I% s
270. [PID: 1576 / Administrator][C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe]  [Google Inc., 2, 0, 301, 1654]
     # I2 l/ K4 p1 L# L( l, T
271.     [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\gtn.dll]  [Google Inc., 2, 0, 301, 7164]
     
272.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
273.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     , O$ p4 L; t7 P9 A( g& L, J
274.     [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\res_zh-CN.dll]  [Google Inc., 2, 0, 301, 7164]
     
275.     [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll]  [Google Inc., 2, 0, 301, 7164]
     
276.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     9 E- R# s2 S6 p3 q  ?& N8 Q- @
277.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
278. [PID: 1648 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     4 R" F" F3 a# M/ A) S$ ]
279. [PID: 1744 / SYSTEM][C:\Program Files\QvodPlayer\QvodTerminal.exe]  [Shenzhen QVOD Technology Co.,Ltd, 2, 5, 0, 53]
     7 h( a- m' y2 J1 F: v+ q; X  ^( Z
280. [PID: 1860 / SYSTEM][C:\WINDOWS\system32\skeys.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     
281. [PID: 1908 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
     5 L/ ]4 g# t) Z4 z: ^( Z" l
282. [PID: 1964 / LOCAL SERVICE][C:\WINDOWS\system32\wdfmgr.exe]  [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
     8 o7 S& \( I! r* P4 z5 m) e
283. [PID: 2772 / Administrator][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
     ( t9 z" L/ z1 Z
284.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     6 |; g. w! r* A# @, Y, z
285.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     3 d! v! R0 j& S- Z* m
286.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
287.     [c:\program files\google\googletoolbar2.dll]  [Google Inc., 4, 0, 1606, 6690]
     
288.     [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll]  [Google Inc., 2, 0, 301, 7164]
     & j% {% L' O0 v: B+ p/ o
289.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KASBrowserShield.DLL]  [Kingsoft Corporation, 2008,04,15,2]
     
290.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddy.dll]  [Kingsoft Corporation, 2008,04,15,2]
     
291.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\IEBuddyExt.DLL]  [Kingsoft Corporation, 2008,05,14,83]
     
292.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KANTray.dll]  [Kingsoft Corporation, 2008,04,15,2]
     ; b7 g; O* Q) Y% b" @
293.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KAVAFish.DLL]  [Kingsoft Corporation, 2008,05,13,78]
     
294.     [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
     
295.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
     
296.     [C:\WINDOWS\system32\WN.IME]  [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
     - z3 Q5 h& f8 U
297.     [C:\Program Files\ShiQiang\wnime\Dll32\wnpy_StatusWnd.dll]  [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
     
298.     [C:\Program Files\ShiQiang\wnime\Dll32\wnpy_CompWnd.dll]  [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
     
299.     [C:\Program Files\ShiQiang\wnime\Dll32\wnpy_Query.dll]  [深圳世强软件开发部 www.wn51.com, 2008, 3, 20, 1]
     
300.     [C:\WINDOWS\system32\SOGOUPY.IME]  [Sogou.com Inc., 3.2.0.0]
     4 x  D% \* O* C% n' f. I
301.     [C:\Documents and Settings\Administrator\My Documents\SogouInput\Plugin\SgImeWord.dll]  [Sogou.com Inc., 3.2.0.0]
     
302.     [C:\WINDOWS\system32\WINWB98.IME]  [Microsoft Corporation, 4.00.950]
     
303.     [C:\WINDOWS\system32\WINWB86.IME]  [Microsoft Corporation, 4.00.950]
     3 C3 f" T- m0 m2 _
304.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
305. [PID: 1124 / Administrator][C:\Program Files\Tencent\QQ\TXPlatform.exe]  [Tencent, 1, 0, 170, 0]
     0 m3 C! M! V" s
306.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     1 M8 g& w; W0 R6 H
307.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     6 M8 w" s; T8 N1 _
308.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
309.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
310. [PID: 928 / Administrator][F:\arvmon.exe]  [任软工作室, 2.2.5.201]
     
311.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     
312.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     ) n  ^& z3 ~+ i/ C" O7 w) ]
313.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     7 k1 e- D  s# _7 O- \" B8 }
314.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
315.     [F:\Vdata.dll]  [任软工作室, 2, 2, 1, 94]
     7 u& e" l0 E6 Z. G. y3 Z/ l
316. [PID: 2540 / Administrator][F:\AutoGuarder.exe]  [任软工作室, 2.2.5.201]
     ! ~  p7 P* q" O5 z. x; H; a
317.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     ! g+ M, b( V8 A8 W2 V4 u# J
318.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     
319.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     " c( i6 U8 [8 I' ?; k  \
320.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
321. [PID: 2476 / Administrator][d:\我的文档\桌面\系统检测修复\SREngPS.EXE]  [Smallfrogs Studio, 2.5.16.900]
     1 `/ |/ h0 B8 [! z% y1 t& Q/ [
322.     [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 5, 1001]
     & \) T) ]' o' ~8 q7 d
323.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
     2 V: L. s1 S6 U' x" A
324.     [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
     
325.     [C:\Program Files\Tencent\QQ\DShared.dll]  [Tencent, 2, 1, 0, 0]
     
326.     [d:\我的文档\桌面\系统检测修复\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]
     8 H8 @) b6 R* p. u, z. r) I+ L
327. ==================================
     
328. 文件关联
     # u8 G/ c8 K! f' T2 z
329. .TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
     
330. .EXE  OK. ["%1" %*]
     & z1 K0 r6 ^9 Q2 _/ d/ B
331. .COM  OK. ["%1" %*]
     
332. .PIF  OK. ["%1" %*]
     0 N( O$ ^+ n# ^( X# {4 d
333. .REG  OK. [regedit.exe "%1"]
     2 a  H. u9 d, A/ n
334. .BAT  OK. ["%1" %*]
     % x- ~  o% ?% Y
335. .SCR  OK. ["%1" /S]
     $ @! k/ u* a( @2 W+ B
336. .CHM  OK. ["C:\WINDOWS\hh.exe" %1]
     - b; L1 j' x$ L% t4 H+ B8 ]+ X
337. .HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
     / n3 J4 _8 O0 c9 K5 @
338. .INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
     
339. .INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
     
340. .VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
     . `4 E$ B* ^2 \1 I
341. .JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
     . W1 P8 o3 S" ?1 w
342. .LNK  OK. [{00021401-0000-0000-C000-000000000046}]
     
343. ==================================
     
344. Winsock 提供者
     
345. N/A
     1 A& A$ C; ?3 Z- ?$ J( k
346. ==================================
     
347. Autorun.inf
     
348. N/A
     
349. ==================================
     3 U0 T/ C7 D1 k- u/ u
350. HOSTS 文件
     7 S- J) `" d' W& G7 B0 n. b
351. N/A
     ! ]1 i7 t! q" O3 a1 F+ K) A
352. ==================================
     ; ^: e' g. k2 D! I; `! |3 z
353. 进程特权扫描
     
354. 特殊特权被允许： SeLoadDriverPrivilege [PID = 520, C:\WINDOWS\SYSTEM32\WINLOGON.EXE]
     
355. 特殊特权被允许： SeDebugPrivilege [PID = 928, F:\ARVMON.EXE]
     0 }+ ]: g6 \- ~3 t0 k
356. 特殊特权被允许： SeLoadDriverPrivilege [PID = 928, F:\ARVMON.EXE]
     
357. 特殊特权被允许： SeDebugPrivilege [PID = 2540, F:\AUTOGUARDER.EXE]
     
358. 特殊特权被允许： SeLoadDriverPrivilege [PID = 2540, F:\AUTOGUARDER.EXE]
     % |- H. a8 ]1 C. L& D
359. ==================================
       {: m  S1 V7 B. J( U" S
360. API HOOK
     ' ?* i5 k' B* ]8 H+ @7 |
361. N/A
     
362. ==================================
     
363. 隐藏进程
     - J  c& n4 Y% L" u$ k! l/ H$ M
364. N/A
     
365. ==================================
     
366. 
     ( |/ h% ?4 u  o$ Q

复制代码

傲天♂扬帆

跟原始说了，不知道能不能看明白。。。

傲天♂元始

[Start]

" Q) v2 M" u% g3 `% w# P/ L& y2008-05-22,22:24:21

' V1 ^" c  B/ J2 j; |* wSREngLOG智能分析专家 V1.2.0.125
! x+ o8 v) V4 a2 D9 k4 f, Y& _  ZTored (http://hi.baidu.com/peaset)

' b2 a2 c4 [: G2 {% M======================================================
! k* @3 S3 N5 L" J# P7 C( l, P. \+ K以下过程将用到SREng、PowerRmv，如果您不熟悉这两款工具的使用方法，请参考下列链接：
/ Y4 S+ C$ g, B  A: U% ~SREng详细操作方法： http://hi.baidu.com/peaset/blog/ ... dd19224e4aeadf.html
PowerRmv详细操作方法： http://hi.baidu.com/peaset/blog/ ... 6fb5eb77c63816.html
======================================================
; Q2 S1 Y, n0 S8 \7 t  {' y
以下是病毒清除步骤：

9 P- H+ t' y4 B  Z1、用PowerRmv删除以下文件(没有则跳过)：
. E* Q% ]& L, T
; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
: p+ w' L* {' [- ~$ t. w;
; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
' g# L) K5 ~5 }$ ^1 w, R) kC:\WINDOWS\System32\3wareSrv.exe
) H4 D: a; p2 T\SystemRoot\C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll

\SystemRoot\System32\DRIVERS\22jn.sys
\SystemRoot\System32\DRIVERS\43ecu.sys
7 e; C4 y3 h! Y; X% H6 j* I\??\C:\Documents and Settings\All Users\Application Data\Microsoft\Office\SYSTEM\ntptdb.sys
/ |( P! u- R$ S' q# a' j\SystemRoot\system32\drivers\pnduojtwbt.sys
- ]; @& _  O2 q\SystemRoot\system32\drivers\RsBoot.sys
4 x" ]" v% B" u4 b" Dsystem32\DRIVERS\sr.sys
% t. Y! U- l1 m0 }5 R5 E% f\SystemRoot\system32\drivers\unzxzsrs.sys
2 R  x5 g& v: r, @0 ?6 w5 k' \\SystemRoot\system32\DRIVERS\ViBus.sys
\SystemRoot\system32\drivers\zhibmaso.sys

2、用SREng删除以下【注册表】项(没有则跳过)：

* B' t8 Z4 N& B1 ?3 n5 t<IMJPMIG8.1>
* C3 D1 a5 Y' Z  I6 z8 E<PHIME2002A>
1 @4 Q+ z$ U" g  X4 |<PHIME2002ASync>
) k# v1 l! D. k$ `$ M6 }- s" w& K9 K
  e2 c$ @: r3 E5 `8 k2 U3、用SREng删除【所有启动文件夹】内容(没有则跳过)
8 |0 C1 I, j* M6 Y) J7 C# E
4 F* \& w% N1 u3 r) r8 K" N9 g, v' A4、用SREng删除以下【服务】项(没有则跳过)：
& c) t4 w, }6 `" h6 H6 K
[3ware Controller Service / 3wareSrv]
[NetMeeting Remote Desktop Sharing / mnmsrvc]
  |2 V) L% ?( r* x8 L
5、用SREng删除以下【驱动程序】项(没有则跳过)：

[22j / 22jn]
' c$ g; E" s; o- L6 i& S5 @7 }[43ec / 43ecu]
[ntptdb / ntptdb]
[pnduojtwbt / pnduojtwbt]
  }& r8 e& m" Z[RsAntiSpyware / RsAntiSpyware]
[System Restore Filter Driver / sr]
[System Services / unzxzsrs]
( [% F0 _* W: [6 f0 ]) X& J[ViBus / ViBus]
# ~* Q- _4 ]8 Y+ F+ I) L[ATI Extend / zhibmaso]
) D+ d7 x) q( `4 _# X- W
6、用SREng删除以下【浏览器加载项】项(没有则跳过)：
2 f* W3 t4 Z8 x4 }5 }. N& Y
: T# q" X  k. A  N( ^) \[Zcom 杂志]
[Browser Enhanced Objects]
3 S3 v2 F. N  _4 F' U+ `8 B
4 O/ b- `% s' s! [9 s3 g4 {5 `最后,重新启动计算机.Tored祝您好运!
* t& ]+ e3 l/ T2 s1 r4 L  ^======================================================
[End]

傲天♂元始

你就这样弄，不行我也没办法

傲天♂扬帆

独恋有按原始说的重新操作一次吗？

独恋伊影

找不到要删的文件。。。。

傲天♂元始

有些都是隐藏起来的

傲天♂风云

2 I( U# S: g1 f' S* c我对代码 一点都不懂

傲天♂元始

。。。这不是代码只是系统的扫描日志而已

傲天♂冷漠

我汗~~~
$ c. |7 P$ s: S- q5 q这么多代码~~~