重装系统后 bbs.ikaka.com

359705420 - 2006-9-17 19:35:00

在重装系统前发现没有声音音乐甚至winxp的启动声也没有现在无法察看隐藏文件点中了确定后还是没有进去后还是变成原来的不显示隐藏文件

359705420 - 2006-9-17 19:36:00

2006-09-17,19:26:06

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [Microsoft Corporation]
<PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation]
<PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation]
<Rainlendar><C:\Program Files\Rainlendar\Rainlendar.exe> [Rainy]
<WinRoll><C:\Program Files\WinRoll\WinRoll.exe> []
<YzDock><C:\Program Files\YzDock\YzDock.exe> [Y'z@Home]
<YZShadow><C:\Program Files\YZShadow\YZShadow.exe> [Y'z@Home]
<SunJavaUpdateSched><C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe> [Sun Microsystems, Inc.]
<SoundMam><C:\WINDOWS\system32\SVOHOST.exe> []
<StormCodec_Helper><"D:\暴风影音\Storm Codec\StormSet.exe" /S /opti> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [Microsoft Corporation]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [Microsoft Corporation]
[HKEY_CURRENT_USER\Control Panel\Desktop]
<SCRNSAVE.EXE><C:\WINDOWS\System32\Flurry.scr> [Matt Ginzton]

359705420 - 2006-9-17 19:36:00

启动文件夹
服务

==================================
浏览器加载项
[SSVHelper Class]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} <C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll, Sun Microsystems, Inc.>
[PRBHO.HTMLDocumentCtrl]
{AAC73F50-03DD-47E5-AD18-FDD65BF29E3D} <C:\WINDOWS\system32\ZComBHO.dll, zcom>
[PrjZKBaiduBHO.ZKBaiduBHO]
{BBF3E65D-762A-41AC-BFDA-7C6D97E65A73} <C:\WINDOWS\system32\ZKBaiduBHO.dll, zcom>
[易趣购物]
{DE607143-AC19-423e-860A-0D70ABDF119A} <http://click2.ad4all.net/url2/urlmanage/url.asp?id=5, N/A>
[Messenger]
{FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[Java Plug-in]
{8AD9C840-044E-11D1-B3E9-00805F499D93} <C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll, Sun Microsystems, Inc.>
[Java Plug-in]
{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll, Sun Microsystems, Inc.>
[Java Plug-in 1.5.0_06]
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll, Sun Microsystems, Inc.>
[Windows Media Player]
{22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[HTML Document]
{25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
[SSVHelper Class]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} <C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll, Sun Microsystems, Inc.>
[PRBHO.HTMLDocumentCtrl]
{AAC73F50-03DD-47E5-AD18-FDD65BF29E3D} <C:\WINDOWS\system32\ZComBHO.dll, zcom>
[SearchAssistantOC]
{B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[PrjZKBaiduBHO.ZKBaiduBHO]
{BBF3E65D-762A-41AC-BFDA-7C6D97E65A73} <C:\WINDOWS\system32\ZKBaiduBHO.dll, zcom>
[AUDIO__X_MS_WMA Moniker Class]
{CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[RealPlayer G2 Control]
{CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[ 发送图片到手机]
<C:\Program Files\ZCOMPRDIY\MenuSendImg.htm, N/A>

==================================
正在运行的进程
[PID: 444][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 496][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 520][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 564][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 576][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 720][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 768][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 804][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 848][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 904][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
[PID: 1048][C:\WINDOWS\system32\wdfmgr.exe] <Microsoft Corporation><5.2.3790.1230 built by: dnsrv(bld4act)>
[PID: 1308][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\Program Files\WinRoll\winroll.dll] <N/A><N/A>
[C:\Program Files\YZShadow\YZShadow.dll] <><1, 9, 0, 0>
[C:\WINDOWS\system32\winscok.dll] <N/A><N/A>
[C:\Program Files\YzDock\YzDock.dll] <Y'z@Home><0, 5, 0, 0>
[C:\WINDOWS\system32\Byblos.dll] <><1, 0, 0, 1>
[C:\WINDOWS\system32\ZComBHO.dll] <zcom><1.00>
[C:\WINDOWS\system32\ZKBaiduBHO.dll] <zcom><1.02.0006>
[PID: 1464][C:\Program Files\Rainlendar\Rainlendar.exe] <Rainy><0, 22, 0, 0>
[C:\Program Files\Rainlendar\Rainlendar.dll] <N/A><N/A>
[C:\Program Files\Rainlendar\Plugins\IniFormatPlugin.dll] <N/A><N/A>
[C:\WINDOWS\system32\winscok.dll] <N/A><N/A>
[C:\Program Files\YZShadow\YZShadow.dll] <><1, 9, 0, 0>
[C:\Program Files\WinRoll\winroll.dll] <N/A><N/A>
[PID: 1472][C:\Program Files\WinRoll\WinRoll.exe] <N/A><N/A>
[C:\Program Files\WinRoll\winroll.dll] <N/A><N/A>
[C:\WINDOWS\system32\winscok.dll] <N/A><N/A>
[C:\Program Files\YZShadow\YZShadow.dll] <><1, 9, 0, 0>
[PID: 1480][C:\Program Files\YzDock\YzDock.exe] <Y'z@Home><0, 8, 3, 0>
[C:\Program Files\YzDock\Languages\SimpChinese.lang] < ><1, 0, 0, 0>
[C:\Program Files\YzDock\YzDock.dll] <Y'z@Home><0, 5, 0, 0>
[C:\Program Files\YZShadow\YZShadow.dll] <><1, 9, 0, 0>
[C:\WINDOWS\system32\winscok.dll] <N/A><N/A>
[C:\Program Files\YzDock\docklets\RecycleBin\RecycleBin.dll] <N/A><N/A>
[C:\Program Files\YzDock\YzDocklet.dll] <Y'z@Home><2, 0, 0, 0>
[C:\Program Files\WinRoll\winroll.dll] <N/A><N/A>
[PID: 1488][C:\Program Files\YZShadow\YZShadow.exe] <Y'z@Home><1, 9, 0, 0>
[C:\Program Files\YZShadow\Languages\SimpChinese.lang] <><1, 0, 0, 0>
[C:\Program Files\YZShadow\YZShadow.dll] <><1, 9, 0, 0>
[C:\Program Files\WinRoll\winroll.dll] <N/A><N/A>
[C:\WINDOWS\system32\winscok.dll] <N/A><N/A>
[PID: 1496][C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe] <Sun Microsystems, Inc.><5.0.60.5>
[PID: 1504][C:\WINDOWS\system32\SVOHOST.exe] <N/A><N/A>
[C:\WINDOWS\system32\winscok.dll] <N/A><N/A>
[C:\Program Files\YZShadow\YZShadow.dll] <><1, 9, 0, 0>
[C:\Program Files\WinRoll\winroll.dll] <N/A><N/A>
[PID: 1520][C:\WINDOWS\system32\ctfmon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\Program Files\WinRoll\winroll.dll] <N/A><N/A>
[C:\WINDOWS\system32\winscok.dll] <N/A><N/A>
[C:\Program Files\YZShadow\YZShadow.dll] <><1, 9, 0, 0>
[PID: 1584][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1676][C:\WINDOWS\system32\conime.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\Program Files\YZShadow\YZShadow.dll] <><1, 9, 0, 0>
[C:\WINDOWS\system32\winscok.dll] <N/A><N/A>
[C:\Program Files\WinRoll\winroll.dll] <N/A><N/A>
[PID: 3100][C:\Program Files\Internet Explorer\IEXPLORE.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\Program Files\YZShadow\YZShadow.dll] <><1, 9, 0, 0>
[C:\WINDOWS\system32\winscok.dll] <N/A><N/A>
[C:\Program Files\YzDock\YzDock.dll] <Y'z@Home><0, 5, 0, 0>
[C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll] <Sun Microsystems, Inc.><5.0.60.5>
[C:\WINDOWS\system32\ZComBHO.dll] <zcom><1.00>
[C:\WINDOWS\system32\ZKBaiduBHO.dll] <zcom><1.02.0006>
[C:\Program Files\WinRoll\winroll.dll] <N/A><N/A>
[C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx] <Adobe Systems, Inc.><9,0,16,0>
[PID: 2288][C:\Program Files\Internet Explorer\IEXPLORE.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\Program Files\YZShadow\YZShadow.dll] <><1, 9, 0, 0>
[C:\WINDOWS\system32\winscok.dll] <N/A><N/A>
[C:\Program Files\YzDock\YzDock.dll] <Y'z@Home><0, 5, 0, 0>
[C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll] <Sun Microsystems, Inc.><5.0.60.5>
[C:\WINDOWS\system32\ZComBHO.dll] <zcom><1.00>
[C:\WINDOWS\system32\ZKBaiduBHO.dll] <zcom><1.02.0006>
[C:\Program Files\WinRoll\winroll.dll] <N/A><N/A>
[PID: 2740][E:\sreng2\SREng.exe] <Smallfrogs Studio><2.0.21.505>
[C:\Program Files\YZShadow\YZShadow.dll] <><1, 9, 0, 0>
[C:\WINDOWS\system32\winscok.dll] <N/A><N/A>
[C:\Program Files\YzDock\YzDock.dll] <Y'z@Home><0, 5, 0, 0>
[C:\Program Files\WinRoll\winroll.dll] <N/A><N/A>

==================================

359705420 - 2006-9-17 19:37:00

文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

瑞星卡卡安全论坛