小鸟wy - 2006-10-27 16:09:00
2006-10-27,15:48:54
System Repair Engineer 2.2.6.605
Smallfrogs (http://www.KZTechs.com)
Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能
以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Corporation]
<iDuba Personal FireWall><> [N/A]
<pit><C:\WINDOWS\SVCHOST.EXE> [N/A]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Corporation]
<PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [(Verified)Microsoft Corporation]
<PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [(Verified)Microsoft Corporation]
<SoundMam><C:\WINDOWS\system32\svohost.exe> [N/A]
<RichMedia><C:\WINDOWS\system32\Rundll32.exe "C:\PROGRA~1\pcast\hbcast.dll",WaitWindows> [Shanghai Henbang Technology Co., Ltd]
<UpdateRun><C:\Program Files\Common Files\updat\Update.exe> [N/A]
<spoolsv><C:\WINDOWS\system32\spoolsv\spoolsv.exe -printer> [广州傲讯信息科技有限公司]
<Tray><C:\WINDOWS\command\rundll32.exe> [N/A]
<xy><C:\WINDOWS\Download\svhost32.exe> [N/A]
<wl><C:\WINDOWS\Download\svhost32.exe> [N/A]
<ms><C:\Program Files\Microsoft\svhost32.exe> [N/A]
<rzt><C:\WINDOWS\Intel\rundll32.exe> [N/A]
<CdnCtr><C:\Program Files\CNNIC\Cdn\cdnup.exe> [N/A]
<Kavrun><> [N/A]
<iDuba Personal FireWall><> [N/A]
<KavStart><"C:\KAV2005\KAVStart.exe" -startup> [Kingsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Corporation]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [(Verified)Microsoft Corporation]
==================================
启动文件夹
N/A
==================================
服务
[ASP.NET State Service / aspnet_state]
<C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe><Microsoft Corporation>
[QoS Service / BKMARKS]
<C:\WINDOWS\SYSTEM32\RUN32.EXE C:\WINDOWS\SYSTEM32\WBEM\UZHBBO08.DLL,Export 1087><Microsoft Corporation>
[Distributed Console Manager / Hardware]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\vpbujm09.dll><Microsoft Corporation>
[Human Interface Device Access / HidServ]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[JMediaService / JMediaService]
<C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\MMSASS~1\MMSSVER.DLL,Service><Microsoft Corporation>
[Kingsoft Antivirus KWatch Service / KWatchSvc]
<C:\KAV2005\KWatch.EXE><Kingsoft Corporation>
[MessageService / MessageService]
<C:\WINDOWS\system32\Svchost.exe -k MessageService-->C:\WINDOWS\system32\MsServices\svchost.dll><N/A>
[Servicel / Servicel]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\jetspeed.dll><>
[Standard Update Net Service / stdupnet]
<C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\stdupnet.dll,Service -s><Microsoft Corporation>
[Distributed Link Tracking Server / TrkWks]
<C:\WINDOWS\system32\svchost.exe -k netsvsc-->%SystemRoot%\system32\est.dll><Microsoft Corporation>
[Portable Media Serial Number Service / WmdmPmSN]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\mspmsnsv.dll><Microsoft Corporation>
小鸟wy - 2006-10-27 16:12:00
驱动程序
[Albus / Albus]
<\SystemRoot\system32\drivers\Albus.SYS><N/A>
[cdnprot / cdnprot]
<\SystemRoot\system32\drivers\cdnprot.sys><中国互联网络信息中心(CNNIC)>
[VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver / FETNDIS]
<system32\DRIVERS\fetnd5.sys><VIA Technologies, Inc.>
[gspmhq7 / gspmhq78]
<\SystemRoot\System32\DRIVERS\gspmhq78.sys><N/A>
[KWatch3 / KWatch3]
<\??\C:\WINDOWS\system32\drivers\KWatch3.SYS><Kingsoft Corporation>
[Netgroup Packet Filter / NPF]
<system32\DRIVERS\npf.sys><CACE Technologies>
[Direct Parallel Link Driver / Ptilink]
<system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Secdrv / Secdrv]
<system32\DRIVERS\secdrv.sys><N/A>
[viagfx / viagfx]
<system32\DRIVERS\vtmini.sys><Copyright (C) VIA/S3 Graphics Co, Ltd.>
[ViaIde / ViaIde]
<\SystemRoot\system32\DRIVERS\viaide.sys><Microsoft Corporation>
[Vinyl AC'97 Audio Controller (WDM) / VIAudio]
<system32\drivers\vinyl97.sys><VIA Technologies, Inc.>
==================================
浏览器加载项
[wmpdrm]
{0E674588-66B7-4E19-9D0E-2053B800F69F} <C:\WINDOWS\system32\wmpdrm.dll, Allsum Info. Tech. Ltd.>
[KAVIEHelper Class]
{1B2F92A1-CDAF-4511-9382-91E3F5CE0880} <C:\Program Files\KOS\KOSIEBar.dll, 金山软件股份有限公司>
[ra
Object Class]
{46F194EB-B7DB-4B7A-BD42-5FF39FD17664} <C:\PROGRA~1\pcast\hbcast.dll, Shanghai Henbang Technology Co., Ltd>
[QQBrowserHelper
Object Class]
{54EBD53A-9BC1-480B-966A-843A333CA162} <d:\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[CdnForIE Class]
{5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} <C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll, CNNIC>
[Vision]
{6671A431-5C3D-463d-A7CF-5587F9B7E191} <C:\PROGRA~1\MMSASS~1\mmsass~1.dll, >
[]
{68A3B225-BCC2-40E6-BBD9-569CAEA30746} <C:\WINDOWS\system32\addIDhelper.dll, N/A>
[Spoolsv Class]
{9C363D55-07D7-433d-A13E-D9C105202F6F} <C:\WINDOWS\system32\drivers\spoolsv.dll, >
[]
{1D901067-2529-4A9B-9B6B-7A1DB3A44CB5} <C:\Program Files\coolsign\coolsign.dll, Fengcent>
[CdnForIE Class]
{5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} <C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll, CNNIC>
[MMSAssistMenu]
{6671A433-5C3D-463d-A7CF-5587F9B7E191} <C:\PROGRA~1\MMSASS~1\mmsass~1.dll, >
[QQ]
{c95fe080-8f5d-11d2-a20b-00aa003c157b} <D:\Tencent\QQ\QQ.EXE, TENCENT>
[QQIEFloatBarCfgCmd Class]
{DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <d:\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[Messenger]
{FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[金山毒霸安全助手]
{EF72500A-C234-46C4-BF0A-9AA6913DDF34} <C:\Program Files\KOS\KOSIEBar.dll, 金山软件股份有限公司>
[LiveMediaOcx Control]
{9242BB35-0DB0-43AC-8DFC-8EA07E63B92A} <C:\PROGRA~1\Tencent\QQLIVE~1\QQLive.ocx, Tencent>
[wmpdrm]
{0E674588-66B7-4E19-9D0E-2053B800F69F} <C:\WINDOWS\system32\wmpdrm.dll, Allsum Info. Tech. Ltd.>
[EWA Control]
{18226BF8-DC0B-4D81-80E9-A41AE37BB73A} <C:\PROGRA~1\COMMON~1\Synacast\SynaLive\SYNACA~1.OCX, Synacast>
[KAVIEHelper Class]
{1B2F92A1-CDAF-4511-9382-91E3F5CE0880} <C:\Program Files\KOS\KOSIEBar.dll, 金山软件股份有限公司>
[ra
Object Class]
{46F194EB-B7DB-4B7A-BD42-5FF39FD17664} <C:\PROGRA~1\pcast\hbcast.dll, Shanghai Henbang Technology Co., Ltd>
[QQBrowserHelper
Object Class]
{54EBD53A-9BC1-480B-966A-843A333CA162} <d:\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[CdnForIE Class]
小鸟wy - 2006-10-27 16:13:00
{5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} <C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll, CNNIC>
[Vision]
{6671A431-5C3D-463D-A7CF-5587F9B7E191} <C:\PROGRA~1\MMSASS~1\mmsass~1.dll, >
[]
{68A3B225-BCC2-40E6-BBD9-569CAEA30746} <C:\WINDOWS\system32\addIDhelper.dll, N/A>
[Windows Media Player]
{6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[LiveMediaOcx Control]
{9242BB35-0DB0-43AC-8DFC-8EA07E63B92A} <C:\PROGRA~1\Tencent\QQLIVE~1\QQLive.ocx, Tencent>
[Spoolsv Class]
{9C363D55-07D7-433D-A13E-D9C105202F6F} <C:\WINDOWS\system32\drivers\spoolsv.dll, >
[RMGetLicense Class]
{A9FC132B-096D-460B-B7D5-1DB0FAE0C062} <C:\WINDOWS\system32\msnetobj.dll, Microsoft Corporation>
[Microsoft Scriptlet Component]
{AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation>
[SearchAssistantOC]
{B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\macromed\flash\flash.ocx, Macromedia, Inc.>
[>>彩信发送<<]
<res://C:\PROGRA~1\MMSASS~1\mmsass~1.dll/mms.htm, N/A>
[添加到QQ自定义面板]
<D:\Tencent\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
<D:\Tencent\QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<D:\Tencent\QQ\SendMMS.htm, N/A>
[访问通用网址]
<C:\Program Files\CNNIC\Cdn\cnnic.htm, N/A>
==================================
正在运行的进程
[PID: 548][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 596][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 620][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 664][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 676][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 820][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 920][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 960][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[c:\windows\system32\jetspeed.dll] [, 1, 0, 0, 1]
[PID: 1092][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1260][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1332][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2527 (xpsp.040919-1030)]
[C:\WINDOWS\system32\gspmhq78.dll] [N/A, N/A]
[C:\WINDOWS\system32\wldll.dll] [N/A, N/A]
[C:\WINDOWS\system32\msdll.dll] [N/A, N/A]
[C:\WINDOWS\system32\tdll.dll] [N/A, N/A]
[C:\WINDOWS\system32\msicn\msibm.dll] [广州傲讯信息科技有限公司, 2, 0, 0, 1]
[C:\WINDOWS\system32\ztdll.dll] [N/A, N/A]
[C:\WINDOWS\system32\msicn\plugins\as.dll] [广州傲讯信息科技有限公司, 2, 0, 0, 1]
[C:\WINDOWS\system32\msicn\plugins\bm.dll] [广州傲讯信息科技有限公司, 2, 0, 0, 1]
[C:\WINDOWS\system32\msicn\plugins\bse.dll] [广州傲讯信息科技有限公司, 2, 0, 0, 1]
[C:\WINDOWS\system32\msicn\plugins\lup.dll] [广州傲讯信息科技有限公司, 2, 0, 0, 1]
[C:\WINDOWS\system32\msicn\plugins\navangel.dll] [广州傲讯信息科技有限公司, 2, 0, 0, 1]
[C:\Program Files\CNNIC\Cdn\cdnforie.dll] [CNNIC, 2, 0, 0, 0]
[C:\KAV2005\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233]
[C:\PROGRA~1\MMSASS~1\albus.dll] [Albus, 1, 0, 0, 3]
[C:\WINDOWS\system32\drivers\spoolsv.dll] [, 1, 0, 1, 1]
[C:\PROGRA~1\MMSASS~1\mmsass~1.dll] [, 1, 2, 0, 6]
[C:\WINDOWS\system32\addIDhelper.dll] [N/A, N/A]
[PID: 1372][C:\KAV2005\KWatch.EXE] [Kingsoft Corporation, 2005, 4, 24, 48]
[C:\KAV2005\KAVIPC2.DLL] [Kingsoft Corporation, 2004, 12, 28, 20]
[C:\KAV2005\KAEPlat.DLL] [Kingsoft Corp., 2004, 11, 26, 53]
[C:\KAV2005\KAEMem.DAT] [Kingsoft, 2004, 11, 9, 11]
[PID: 1444][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1528][C:\WINDOWS\SYSTEM32\RUN32.EXE] [Microsoft Corporation, 5.00.2134.1]
[PID: 1676][C:\WINDOWS\system32\rundll32.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\PROGRA~1\MMSASS~1\MMSSVER.DLL] [, 1, 2, 0, 6]
[PID: 1716][C:\WINDOWS\system32\Svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[c:\windows\system32\msservices\svchost.dll] [N/A, N/A]
[c:\windows\system32\msservices\MsService.dll] [, 1, 0, 0, 1]
[c:\windows\system32\msservices\unreg1.dll] [N/A, N/A]
[c:\windows\system32\msservices\OldUnReg.dll] [N/A, N/A]
[PID: 1796][C:\WINDOWS\system32\rundll32.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\stdupnet.dll] [ , 4, 1, 0, 3]
[C:\WINDOWS\system32\albus.dll] [Albus, 1, 0, 0, 3]
[PID: 1812][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1852][C:\WINDOWS\System32\rundll32.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\TEMP\jtemp\comare.dll] [N/A, N/A]
[PID: 200][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 220][C:\WINDOWS\system32\wscntfy.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\ztdll.dll] [N/A, N/A]
[C:\WINDOWS\system32\wldll.dll] [N/A, N/A]
[C:\WINDOWS\system32\msdll.dll] [N/A, N/A]
[C:\WINDOWS\system32\tdll.dll] [N/A, N/A]
[C:\KAV2005\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233]
[PID: 536][C:\WINDOWS\system32\Rundll32.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\PROGRA~1\pcast\hbcast.dll] [Shanghai Henbang Technology Co., Ltd, 1, 1, 3, 8]
[C:\WINDOWS\system32\ztdll.dll] [N/A, N/A]
[C:\WINDOWS\system32\wldll.dll] [N/A, N/A]
[C:\WINDOWS\system32\msdll.dll] [N/A, N/A]
[C:\WINDOWS\system32\tdll.dll] [N/A, N/A]
[C:\KAV2005\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233]
[C:\Program Files\CNNIC\Cdn\cdnforie.dll] [CNNIC, 2, 0, 0, 0]
[C:\KAV2005\KAEPlat.DLL] [Kingsoft Corp., 2004, 11, 26, 53]
[C:\KAV2005\KAEMem.DAT] [Kingsoft, 2004, 11, 9, 11]
[PID: 544][C:\Program Files\Common Files\updat\Update.exe] [N/A, N/A]
[C:\WINDOWS\system32\ztdll.dll] [N/A, N/A]
[C:\WINDOWS\system32\wldll.dll] [N/A, N/A]
[C:\WINDOWS\system32\msdll.dll] [N/A, N/A]
[C:\WINDOWS\system32\tdll.dll] [N/A, N/A]
[C:\KAV2005\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233]
[PID: 576][C:\WINDOWS\command\rundll32.exe] [N/A, N/A]
[C:\WINDOWS\system32\tdll.dll] [N/A, N/A]
[PID: 584][C:\WINDOWS\Download\svhost32.exe] [N/A, N/A]
[C:\WINDOWS\system32\wldll.dll] [N/A, N/A]
[C:\WINDOWS\system32\ztdll.dll] [N/A, N/A]
[C:\WINDOWS\system32\msdll.dll] [N/A, N/A]
[C:\WINDOWS\system32\tdll.dll] [N/A, N/A]
[PID: 580][C:\WINDOWS\Download\svhost32.exe] [N/A, N/A]
[PID: 640][C:\Program Files\Microsoft\svhost32.exe] [N/A, N/A]
[C:\WINDOWS\system32\msdll.dll] [N/A, N/A]
[C:\WINDOWS\system32\ztdll.dll] [N/A, N/A]
[C:\WINDOWS\system32\wldll.dll] [N/A, N/A]
[C:\WINDOWS\system32\tdll.dll] [N/A, N/A]
[PID: 764][C:\WINDOWS\Intel\rundll32.exe] [N/A, N/A]
[C:\WINDOWS\system32\ztdll.dll] [N/A, N/A]
[C:\WINDOWS\system32\wldll.dll] [N/A, N/A]
[C:\WINDOWS\system32\msdll.dll] [N/A, N/A]
[C:\WINDOWS\system32\tdll.dll] [N/A, N/A]
[PID: 680][C:\Program Files\CNNIC\Cdn\cdnup.exe] [, 2, 4, 0, 3]
[C:\Program Files\CNNIC\Cdn\cdnforie.dll] [CNNIC, 2, 0, 0, 0]
[C:\WINDOWS\system32\ztdll.dll] [N/A, N/A]
[C:\WINDOWS\system32\wldll.dll] [N/A, N/A]
[C:\WINDOWS\system32\msdll.dll] [N/A, N/A]
[C:\WINDOWS\system32\tdll.dll] [N/A, N/A]
[C:\KAV2005\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233]
[PID: 844][C:\KAV2005\KAVStart.exe] [Kingsoft Corporation, 2005, 12, 15, 192]
[C:\Program Files\CNNIC\Cdn\cdnforie.dll] [CNNIC, 2, 0, 0, 0]
[C:\KAV2005\KAVIPC2.DLL] [Kingsoft Corporation, 2004, 12, 28, 20]
[C:\KAV2005\PopSprt3.dll] [Kingsoft Corporation, 2005, 12, 6, 30]
[C:\KAV2005\KAVPassp.dll] [Kingsoft Corporation, 2005, 11, 22, 221]
[C:\WINDOWS\system32\ztdll.dll] [N/A, N/A]
[C:\WINDOWS\system32\wldll.dll] [N/A, N/A]
[C:\WINDOWS\system32\msdll.dll] [N/A, N/A]
[C:\WINDOWS\system32\tdll.dll] [N/A, N/A]
[C:\KAV2005\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233]
[PID: 852][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\ztdll.dll] [N/A, N/A]
[C:\WINDOWS\system32\wldll.dll] [N/A, N/A]
[C:\WINDOWS\system32\msdll.dll] [N/A, N/A]
[C:\WINDOWS\system32\tdll.dll] [N/A, N/A]
[C:\WINDOWS\system32\msicn\msibm.dll] [广州傲讯信息科技有限公司, 2, 0, 0, 1]
[C:\KAV2005\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233]
[PID: 1068][C:\WINDOWS\SVCHOST.EXE] [N/A, N/A]
小鸟wy - 2006-10-27 16:14:00
[C:\DOCUME~1\SHIDON~1\LOCALS~1\Temp\E_4\krnln.fnr] [, 1, 0, 0, 1]
[C:\Program Files\CNNIC\Cdn\cdnforie.dll] [CNNIC, 2, 0, 0, 0]
[C:\DOCUME~1\SHIDON~1\LOCALS~1\Temp\E_4\shell.fne] [N/A, N/A]
[C:\DOCUME~1\SHIDON~1\LOCALS~1\Temp\E_4\shellEx.fne] [N/A, N/A]
[C:\DOCUME~1\SHIDON~1\LOCALS~1\Temp\E_4\EThread.fne] [N/A, N/A]
[C:\WINDOWS\system32\ztdll.dll] [N/A, N/A]
[C:\WINDOWS\system32\wldll.dll] [N/A, N/A]
[C:\WINDOWS\system32\msdll.dll] [N/A, N/A]
[C:\WINDOWS\system32\tdll.dll] [N/A, N/A]
[C:\DOCUME~1\SHIDON~1\LOCALS~1\Temp\E_4\internet.fne] [, 1, 0, 0, 1]
[C:\KAV2005\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233]
[C:\DOCUME~1\SHIDON~1\LOCALS~1\Temp\E_4\MyLib.fne] [, 1, 0, 0, 1]
[PID: 1248][C:\KAV2005\KMailMon.EXE] [Kingsoft Corporation, 2005, 10, 8, 85]
[C:\KAV2005\KAntiSpm.dll] [N/A, 1, 0, 0, 2]
[C:\KAV2005\KAVIPC2.DLL] [Kingsoft Corporation, 2004, 12, 28, 20]
[C:\Program Files\CNNIC\Cdn\cdnforie.dll] [CNNIC, 2, 0, 0, 0]
[C:\KAV2005\KAECall2.DLL] [Kingsoft Corporation, 2004, 12, 28, 7]
[C:\KAV2005\KAEPlat.DLL] [Kingsoft Corp., 2004, 11, 26, 53]
[C:\KAV2005\KAEMem.DAT] [Kingsoft, 2004, 11, 9, 11]
[C:\KAV2005\KAConfig.DLL] [Kingsoft Corporation, 2005, 5, 16, 31]
[C:\KAV2005\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233]
[C:\WINDOWS\system32\ztdll.dll] [N/A, N/A]
[C:\WINDOWS\system32\wldll.dll] [N/A, N/A]
[C:\WINDOWS\system32\msdll.dll] [N/A, N/A]
[C:\WINDOWS\system32\tdll.dll] [N/A, N/A]
[PID: 2908][C:\Program Files\Tencent\TT\TTraveler.exe] [腾讯公司, 3.1.0.261]
[C:\Program Files\CNNIC\Cdn\cdnforie.dll] [CNNIC, 2, 0, 0, 0]
[C:\KAV2005\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233]
[C:\WINDOWS\system32\ztdll.dll] [N/A, N/A]
[C:\WINDOWS\system32\wldll.dll] [N/A, N/A]
[C:\WINDOWS\system32\msdll.dll] [N/A, N/A]
[C:\WINDOWS\system32\tdll.dll] [N/A, N/A]
[C:\Program Files\Tencent\TT\Plugins\QQFloatBar\QQFloatBar4TT2.dll] [腾讯公司, 1, 1, 0, 5]
[C:\Program Files\Tencent\TT\Plugins\TWeather\TWeather.dll] [, 1, 0, 0, 3]
[C:\Program Files\Tencent\TT\PersonalDesktop.dll] [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 4]
[C:\KAV2005\KAScript.DLL] [Kingsoft Corporation, 2006, 2, 10, 60]
[C:\KAV2005\KAEPlat.DLL] [Kingsoft Corp., 2004, 11, 26, 53]
[C:\KAV2005\KAEMem.DAT] [Kingsoft, 2004, 11, 9, 11]
[C:\WINDOWS\system32\macromed\flash\flash.ocx] [Macromedia, Inc., 6,0,79,0]
[C:\WINDOWS\system32\msicn\msibm.dll] [广州傲讯信息科技有限公司, 2, 0, 0, 1]
[C:\WINDOWS\system32\JPWB.IME] [常诚研制, 4.00.950]
[PID: 3336][C:\Program Files\Tencent\TT\TCPlus.exe] [腾讯公司, 1, 0, 0, 5]
[C:\Program Files\CNNIC\Cdn\cdnforie.dll] [CNNIC, 2, 0, 0, 0]
[C:\KAV2005\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233]
[C:\Program Files\Tencent\TT\QQDownload.dll] [Tencent Technology (Shenzhen) Company Limited, 1, 0, 101, 28]
[C:\Program Files\Tencent\TT\TNProxy.dll] [Tencent Technology(Shenzhen) Company Limited, 2, 1, 101, 60]
[C:\WINDOWS\system32\ztdll.dll] [N/A, N/A]
[C:\WINDOWS\system32\wldll.dll] [N/A, N/A]
[C:\WINDOWS\system32\msdll.dll] [N/A, N/A]
[C:\WINDOWS\system32\tdll.dll] [N/A, N/A]
[PID: 2140][C:\WINDOWS\system32\wuauclt.exe] [Microsoft Corporation, 5.8.0.2469 built by: lab01_n(wmbla)]
[PID: 2604][C:\Documents and Settings\shidonglin\桌面\sreng2\SREng\SREng.exe] [Smallfrogs Studio, 2.2.6.605]
[C:\Program Files\CNNIC\Cdn\cdnforie.dll] [CNNIC, 2, 0, 0, 0]
[C:\KAV2005\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233]
[C:\WINDOWS\system32\ztdll.dll] [N/A, N/A]
[C:\WINDOWS\system32\wldll.dll] [N/A, N/A]
[C:\WINDOWS\system32\msdll.dll] [N/A, N/A]
[C:\WINDOWS\system32\tdll.dll] [N/A, N/A]
[PID: 2740][C:\WINDOWS\system32\wbem\wmiprvse.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
==================================
文件关联
.TXT Error. [C:\WINDOWS\notepad.exe %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM Error. [C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1 localhost
==================================
© 2000 - 2026 Rising Corp. Ltd.
