2006-06-18,10:36:18
System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)
Windows XP Professional (Build 2600)
- 管理权限用户 - 完整功能
以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\System32\ctfmon.exe> [Microsoft Corporation]
<MSMSGS><"C:\Program Files\Messenger\msmsgs.exe" /background> [Microsoft Corporation]
<TClock.exe><C:\Program Files\TClock\tclock_install.exe> []
<Microsoft Windows Autowxckn><autowxckn.exe> []
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
<WinUpdate.exe><C:\Program Files\Windows\WinUpdate.exe> []
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32> [Microsoft Corporation]
<PHIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation]
<PHIME2002A><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation]
<internat.exe><internat.exe> []
<SystemTray><SysTray.Exe> [Microsoft Corporation]
<AutoP><C:\Program Files\!sunv\dfyd\AutoP.exe> [Sunv]
<MicrosoftRedirectionProgram><C:\WINDOWS\svchost.exe> []
<KernelFaultCheck><%systemroot%\system32\dumprep 0 -k> []
<xBarUpdate><C:\Program Files\xBar\xBarUpdate.exe> []
<YOKAssiant><Rundll32.exe C:\PROGRA~1\YOK.com\SUPERS~1\YOK_SuperSearch.dll,YOKAssiant uninstall> []
<IpWins><C:\Program Files\ipwins\ipwins.exe> []
<stup.exe><C:\PROGRA~1\TENCENT\Adplus\stup.exe> [Tencent]
<Microsoft Windows Autowxckn><autowxckn.exe> []
<keyboard><C:\\keyboard25.exe> [.]
<defender><C:\\defender26.exe> [???ìà]
<newname><C:\\newname25.exe> [mudes]
<CnsMin><Rundll32.exe C:\WINDOWS\downlo~1\CnsMin.dll,Rundll32> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]
<Microsoft Windows Autowxckn><autowxckn.exe> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><EXPLORER.EXE> [Microsoft Corporation]
<Userinit><userinit.exe,> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellService
ObjectDelayLoad]
<stdup><> []
<Vision><> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Controls Folder]
<WinlogonNotify: Controls Folder><C:\WINDOWS\system32\jrchs.dll> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Syncmgr]
<WinlogonNotify: Syncmgr><C:\WINDOWS\system32\jrchs.dll> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ThemeManager]
<WinlogonNotify: ThemeManager><C:\WINDOWS\system32\jrchs.dll> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<Autop><; C:\Program Files\!sunv\dfyd\AutoP.exe> [Sunv]
<KernelFaultCheck><; %systemroot%\system32\dumprep 0 -k> []
<kingamp><; C:\Program Files\Kingsoft\KingPlayer\kingamp.exe> [金山软件股份有限公司]
<kpcdst><; C:\Program Files\Kingsoft\KingPlayer\cdsprite.exe> []
<SysExplr><; C:\Herosoft\HeroV8\SYSEXPLR.EXE> []
==================================
启动文件夹
[IE-BAR]
<C:\Documents and Settings\All Users\「开始」菜单\程序\启动\IE-BAR.lnk><N>
[腾讯QQ]
<C:\Documents and Settings\l\「开始」菜单\程序\启动\腾讯QQ.lnk><N>
==================================
服务
[Aol Software / Aol Software]
<"C:\WINDOWS\smss.exe"><N/A>
[Command Service / cmdService]
<C:\WINDOWS\bA\command.exe><N/A>
[IMAPI CD-Burning COM Service / ImapiService]
<C:\WINDOWS\System32\imapi.exe><Microsoft Corporation>
[Distributed Application Client / iSPONER]
<C:\WINDOWS\SYSTEM32\RUNDLL32.EXE C:\WINDOWS\SYSTEM32\WBEM\IRJIT.DLL,Export 1087><N/A>
[Network Monitor / Network Monitor]
<C:\Program Files\Network Monitor\netmon.exe service><N/A>
[VIPTray / VIPTray]
<C:\WINDOWS\System32\VIPTray.exe><N/A>
[wins(WINS) / wins]
<"C:\WINDOWS\system32\winscntrl.exe"><Microsoft Corporation>
==================================
浏览器加载项
[BrowserHelper Class]
{2D99E8F4-56B7-457B-9A92-61B5D247D263} <C:\WINDOWS\System32\WinDefendor.dll, TODO: <公司名>>
[@shdoclc.dll,-866]
{c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[电台(&R)]
{8E718888-423F-11D2-876E-00A0C9082467} <C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation>
[卡卡上网安全助手]
{DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\System32\kakatool.dll, Beijing Rising Technology Co., Ltd.>
[Shockwave Flash
Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[Rising Web Scan
Object]
{E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINDOWS\Downloaded Program Files\OL2005.dll, Beijing Rising Technology Co., Ltd.>