2006-10-06,09:29:01
System Repair Engineer 2.2.6.605
Smallfrogs (http://www.KZTechs.com)
Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能
以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<RavTask><"C:\Program Files\rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.]
<NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup> [(Verified)NVIDIA Corporation]
<KernelFaultCheck><%systemroot%\system32\dumprep 0 -k> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><EXPLORER.EXE> [(Verified)Microsoft Corporation]
<Userinit><userinit.exe,> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll> [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellService
ObjectDelayLoad]
<webwork><C:\WINDOWS\webwork\webwork.dll> [MSWebwork Cop.]
<SysTime><C:\PROGRA~1\WinKld\WinKld.dll> [N/A]
<WPDShServiceObj><C:\WINDOWS\system32\WPDShServiceObj.dll> [(Verified)Microsoft Corporation]
<themeadp><C:\WINDOWS\system32\themeadp.dll> [N/A]
<MediaCheck><C:\PROGRA~1\Kuree\MService.dll> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<BeSys><; > [N/A]
<bgoomain.exe><; > [N/A]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<caishowmanage><; > [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<Cmaudio><; RunDll32 cmicnfg.cpl,CMICtrlWnd> [N/A]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><; C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<Desktop><; C:\WINDOWS\system32\rundll32.exe "C:\Program Files\DeskAdTop\Run.dll" ,Rundll> [N/A]
<downs><; C:\WINDOWS\system32\downs.exe> [bcnet]
<helper.dll><; C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32> [N/A]
<IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Corporation]
<IMSCMig><; C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload> [(Verified)Microsoft Corporation]
<IntelliPoint><; "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"> [(Verified)Microsoft Corporation]
<KernelFaultCheck><; %systemroot%\system32\dumprep 0 -k> [N/A]
<MINI_MINIPP><; > [N/A]
<MoveSearch><; > [N/A]
<MyIMLite><; > [N/A]
<MyIMLite_UpDate><; rundll32 C:\WINDOWS\system32\MyIMLite\Update.dll,UpdateFirst> [N/A]
<NeroFilterCheck><; C:\WINDOWS\system32\NeroCheck.exe> [Ahead Software Gmbh]
<netaccelerate><; C:\WINDOWS\accdoofo.exe> [N/A]
<NvCplDaemon><; RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup> [(Verified)NVIDIA Corporation]
<NvMediaCenter><; RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit> [(Verified)NVIDIA Corporation]
<nwiz><; nwiz.exe /install> [NVIDIA Corporation]
<PHIME2002A><; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [(Verified)Microsoft Corporation]
<PHIME2002ASync><; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [(Verified)Microsoft Corporation]
<RecSche><; > [N/A]
<REGSHAVE><; > [N/A]
<RichMedia><; C:\WINDOWS\system32\Rundll32.exe "C:\PROGRA~1\hbclient\tbhelper.dll",WaitWindows> [Shanghai Henbang Technology Co., Ltd]
<searcher><; > [N/A]
<spoolsv><; > [N/A]
<StormCodec_Helper><; "C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti> [N/A]
<TkBellExe><; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.]
<untmsg><; > [N/A]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<updateMgr><; "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<UserFaultCheck><; %systemroot%\system32\dumprep 0 -u> [N/A]
<WinDVR SchSvr><; > [N/A]
<yassistse><; > [N/A]
<YOKAssiant><; Rundll32.exe C:\PROGRA~1\YOK.com\SUPERS~1\YOK_SuperSearch.dll,YOKAssiant> [N/A]
==================================
启动文件夹
N/A
==================================
服务
[Adobe LM Service / Adobe LM Service]
<"C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"><Adobe Systems>
[Human Interface Device Access / HidServ]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[JMediaService / JMediaService]
<C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\MMSASS~1\MMSSVER.DLL,Service><Microsoft Corporation>
[Kingbase ES / Kingbase ES]
<C:\Program Files\kingbase\server\kbser.exe><Basesoft>
[NVIDIA Display Driver Service / NVSvc]
<C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>
[Rising Process Communication Center / RsCCenter]
<"C:\Program Files\rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon]
<"C:\Program Files\rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[Check Point SecuRemote Service / SR_Service]
<"C:\Program Files\CheckPoint\SecuRemote\bin\SR_Service.exe"><Check Point Software Technologies>
[Check Point SecuRemote WatchDog / SR_WatchDog]
<"C:\Program Files\CheckPoint\SecuRemote\bin\SR_WatchDog.exe"><Check Point Software Technologies>
[StdService / StdService]
<C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\System32\STDSVER.DLL,Service><Microsoft Corporation>
[Updata_Server. / Updata_Server.]
<><N/A>
[User Profile Hive Cleanup / UPHClean]
<C:\Program Files\UPHClean\uphclean.exe><Microsoft Corporation>
[WinWrCup / WinWrCup]
<><N/A>
[Windows Media Connect Service / WMConnectCDS]
<C:\Program Files\Windows Media Connect 2\wmccds.exe><Microsoft Corporation>
==================================
驱动程序
[Intel(r) 82801 Audio Driver Install Service (WDM) / ac97intc]
<system32\drivers\ac97intc.sys><Intel Corporation>
[aic78u2 / aic78u2]
<\SystemRoot\System32\DRIVERS\aic78u2.sys><Microsoft Corporation>
[Albus / Albus]
<\SystemRoot\system32\drivers\Albus.SYS><N/A>
[Aspi32 / Aspi32]
<System32\drivers\aspi32.sys><Adaptec>
[Rising TDI Base Driver / BaseTDI]
<System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.>
[PCMedia TV FM WDM Video Capture / Cap7134]
<System32\DRIVERS\Cap7134.sys><SHENZHEN DIGITAL GRAPHICS CO., LTD.>
[C-Media WDM Audio Interface / cmuda]
<system32\drivers\cmuda.sys><N/A>
[MSI PVS Video Capture / CX23880]
<system32\drivers\CX88Vid.SYS><TelSignal Co., Ltd.>
[MSI PVS Crossbar / CX88XBAR]
<system32\drivers\CX88XBar.SYS><TelSignal Co., Ltd.>
[MSI PVS Tuner / CXTUNE]
<system32\drivers\CX88Tune.SYS><TelSignal Co., Ltd.>
[DriveMap / DriveMap]
<C:\WINDOWS\SYSTEM32\DRIVERS\DriveMap.SYS><Adaptec>
[3Com EtherLink XL 90XB/C Adapter Driver / EL90XBC]
<System32\DRIVERS\el90xbc5.sys><3Com Corporation>
[Creative AudioPCI (ES1371,ES1373) (WDM) / es1371]
<system32\drivers\es1371mp.sys><Creative Technology Ltd.>
[ExpScaner / ExpScaner]
<\??\C:\Program Files\rising\Rav\ExpScan.sys><>
[FinePix Digital Camera / FINEPIX_PCC]
<System32\Drivers\V4CB010B.SYS><FUJI PHOTO FILM CO.,LTD.>
[SecuRemote Miniport / FW1]
<system32\DRIVERS\fw.sys><Check Point Software Technologies>
[hcalway / hcalway]
<system32\DRIVERS\hcalway.sys><Windows (R) 2000 DDK provider>
[HookCont / HookCont]
<\??\C:\Program Files\rising\Rav\HOOKCONT.sys><Rising tech Co. ltd>
[HookReg / HookReg]
<\??\C:\Program Files\rising\Rav\HookReg.sys><>
[HookSys / HookSys]
<\??\C:\Program Files\rising\Rav\HookSys.sys><Rising>
[IdeBusDr / IdeBusDr]
<\SystemRoot\system32\DRIVERS\IdeBusDr.sys><Intel Corporation>
[Intel(R) Ultra ATA Controller / IdeChnDr]
<\SystemRoot\system32\DRIVERS\IdeChnDr.sys><Intel Corporation>
[LifeView LR138 Capture Driver / LVCap138]
<system32\DRIVERS\lvcap138.sys><Animation Technologies Inc.>
[LVHybrid service / LVHybrid]
<system32\DRIVERS\LVHybrid.sys><Lifeview>
[LifeView WDM TV Tuner / lvtuner]
<system32\DRIVERS\lvtuner.sys><Animation Technologies Inc.>
[MEMSCAN / MEMSCAN]
<\??\C:\Program Files\rising\Rav\MEMSCAN.sys><瑞星软件有限公司>
[New0 / New0]
<\??\C:\WINDOWS\system32\new.sys><N/A>
[npkcrypt / npkcrypt]
<\??\C:\Program Files\Tencent\npkcrypt.sys><INCA Internet Co., Ltd.>
[nv / nv]
<System32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[VPN-1 SecureClient Adapter / OMVA]
<system32\DRIVERS\OMVA.sys><Check Point Software Technologies>
[oreans32 / oreans32]
<\??\C:\WINDOWS\system32\drivers\oreans32.sys><N/A>
[Pcatip / Pcatip]
<System32\DRIVERS\PcAtip.sys><VSO Software>
[Low level access layer for CD devices / Pcouffin]
<System32\Drivers\Pcouffin.sys><VSO Software>
[Padus ASPI Shell / pfc]
<system32\drivers\pfc.sys><Padus, Inc.>
[PfModNT / PfModNT]
<\??\C:\WINDOWS\system32\PfModNT.sys><Creative Technology Ltd.>
[Direct Parallel Link Driver / Ptilink]
<System32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[SB PCI Family Audio Driver (WDM) / sbpci]
<system32\drivers\sbpci.sys><Creative Technology Ltd.>
[SecureClient Application Policy Module / Scap]
<System32\DRIVERS\Scap.sys><Check Point Software Technologies>
[Secdrv / Secdrv]
<System32\DRIVERS\secdrv.sys><N/A>
[USB Filter Driver / ser2pl]
<system32\DRIVERS\ser2pl.sys><Prolific Technology Inc.>
[Sony USB Filter Driver (SONYPVU1) / SONYPVU1]
<System32\DRIVERS\SONYPVU1.SYS><Sony Corporation>
[VPN-1 Module / VPN-1]
<\SystemRoot\System32\drivers\vpn.sys><Check Point Software Technologies>