2006-09-08,14:48:57
System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)
Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能
以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [Microsoft Corporation]
<Realplayer.exe><C:\WINDOWS\system32\Realplayer.exe> []
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<SoundMan><SOUNDMAN.EXE> [Realtek Semiconductor Corp.]
<桌面图标文字自动透明><D:\Program Files\优化大师\wom\WinMem.exe XP> []
<Windows木马防火墙><D:\Program Files\木马清道夫\Trojanwall.exe> []
<RfwMain><"C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup> [Beijing Rising Technology Co., Ltd.]
<CdnCtr><C:\Program Files\CNNIC\Cdn\cdnup.exe> []
<RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.]
<IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [Microsoft Corporation]
<PHIME2002A><; > []
<PHIME2002ASync><; > []
<StormCodec_Helper><; > []
<Realplayer.exe><C:\WINDOWS\system32\Realplayer.exe> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [Microsoft Corporation]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{F2E14B18-07BD-4799-8E68-27EB817FC2A6}><> []
<{218ED04E-AE8C-4AA1-B99B-8D19FF3E17C5}><> []
<{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll> [Beijing Rising Technology Co., Ltd.]
<{6900707B-CC4D-43AA-B91D-C42E55B545C1}><> []
<{E5E81550-A5E7-47C7-9E39-5F5C408024E3}><> []
<{06BE65D2-7798-4D79-8358-008CAD08CDCA}><> []
<{B6884266-8D28-40E9-B2A5-9B769A7B7292}><> []
<{71DDEECF-2C4D-4080-A77A-500D71F59238}><> []
<{466649CE-ED40-4F3D-9D0E-F992CF4460AA}><> []
<{9B4CAB64-C013-4B38-94D2-96BB41535378}><> []
<{414E3255-8345-4F02-9E18-BCFCF8C9718F}><> []
<{20AAB7BD-9780-4528-AB88-88E999AA0F91}><> []
<{7CAC3FC6-208A-497E-B834-125DE54ADB9A}><> []
<{BD3F3001-7BC0-4676-81C6-A79C31290759}><> []
<{438DECB4-50BE-48F5-8894-819BFF382954}><> []
<{E4AE99AD-57E7-4C5F-B5AB-BF3E56114339}><> []
<{A11CA416-4250-44AD-AE6A-EF4DA045FB61}><> []
<{7B1A9691-7602-4A9E-8908-A0FCE6F3CD0C}><> []
<{6F73DF53-A32C-416E-B403-D845F933F14F}><> []
<{08689B6C-8FCE-4FBE-B44E-18F991365349}><> []
<{7E06DC70-0E45-4D15-B80A-40FE2FCE1C07}><> []
<{126666CB-455B-4B13-9018-FFB4963612EA}><> []
<{0E3DABB3-996B-406C-BB05-86AE16DA5A17}><> []
<{95B82BFF-53DC-4664-A9E0-B32F66FD6796}><> []
<{01746EED-2FAF-4847-ACEF-00CEF266CCE4}><> []
<{F8A4FFFC-8BDE-4311-82A6-5B4031B3D44F}><> []
<{7B702E33-DE6B-4A42-A963-D14CB632791A}><> []
<{95D1603C-4B78-4A17-9730-2F9CB60AFF96}><> []
<{98EFDDD6-F5D4-4E49-94C4-AD039550825F}><> []
<{D188BB0F-AB8B-42AA-9F0E-C7C1BFAD3588}><> []
<{08315C1A-9BA9-4B7C-A432-26885F3QQDSQ}><C:\Program Files\Common Files\Microsoft Shared\MSINFO\qqdsq2.lmz> []
==================================
启动文件夹
服务
[Rising Proxy Service / RfwProxySrv]
<c:\program files\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.>
[Rising Personal Firewall Service / RfwService]
<c:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.>
[Rising Process Communication Center / RsCCenter]
<"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon]
<"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[Update Service For Windows / SoftUpdate]
<C:\WINDOWS\SoftUpdate.exe><N/A>
[svchost / svchost]
<C:\WINDOWS\Hacker.com.cn.exe><N/A>
[svchostt / svchostt]
<C:\WINDOWS\system32\svchostt.exe><N/A>
[Windows Management NetWork Service Extensions / Windows Management NetWork Service Extensions]
<NetManager.exe -exe_start><N/A>
[Windows XP Vista / Windows XP Vista ]
<><N/A>