[CODE]
2007-03-10,12:53:18
System Repair Engineer 2.4.12.806
Smallfrogs (http://www.KZTechs.com)
Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能
以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Windows Publisher]
<v3zl><C:\WINDOWS\cftmoa.exe> []
<svc><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\spolive.exe> [Microsoft Corporation]
<3hzrcg><C:\WINDOWS\iexp1ora.exe> []
<q7qke><C:\WINDOWS\winlog0a.exe> []
<gy><C:\WINDOWS\iexpl0ra.exe> []
<kcd3q86lkfw8t><C:\WINDOWS\Servera.exe> []
<jybi4ydx9><C:\WINDOWS\crasoa.exe> []
<rd5g><C:\WINDOWS\rundl13a.exe> []
<1ks0><C:\WINDOWS\c0nima.exe> []
<w3i3sdxttq4fh><C:\WINDOWS\servicea.exe> []
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<RfwMain><"D:\Rising\Rfw\rfwmain.exe" -Startup> [Beijing Rising Technology Co., Ltd.]
<RavTask><"D:\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.]
<NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup> [NVIDIA Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Windows Publisher]
<Userinit><C:\WINDOWS\system32\Userinit.exe,> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><338448M.BMP> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll> [Beijing Rising Technology Co., Ltd.]
<{1A404685-7563-4d02-B0F6-58B308A406A9}><c:\program files\tencent\qq\bbqehopn.dll> [N/A]
<{A6011F8F-A7F8-49AA-9ADA-49127D43138F}><C:\Program Files\Common Files\Microsoft Shared\MSINFO\NewInfo.rxk> []
<{754FB7D8-B8FE-4810-B363-A788CD060F1F}><C:\Program Files\Internet Explorer\PLUGINS\SystemKb.sys> []
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<14mrg2d7buqe2d><; C:\WINDOWS\rundl13a.exe> []
<1w40uksfs4><; C:\WINDOWS\winlog0a.exe> []
<1xj3s48r5016ie3><; C:\WINDOWS\rundl13a.exe> []
<57><; C:\WINDOWS\crasoa.exe> []
<6><; C:\WINDOWS\cftmoa.exe> []
<6b0031t7zvvll7><; C:\WINDOWS\iexp1ora.exe> []
<7m0geh4406x2><; C:\WINDOWS\iexp1ora.exe> []
<9jz39><; C:\WINDOWS\system.exe> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<BigDogPath><; C:\WINDOWS\VM_STI.EXE VIMICRO USB PC Camera 301x> [N/A]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<c1595rlg1><; C:\WINDOWS\cftmoa.exe> []
<ch596jfquh6y1vb><; C:\WINDOWS\winlog0a.exe> []
<dfibwqwc><; C:\WINDOWS\Servera.exe> []
<e1qu><; C:\WINDOWS\iexpl0ra.exe> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<HF_GameClient><; C:\Program Files\浩方对战平台\gameclient.exe> [上海浩方在线信息技术有限公司]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<hl60v22u><; C:\WINDOWS\iexp1ora.exe> []
<i023bj89d7x4yx><; C:\WINDOWS\c0nima.exe> []
<ijyrctx56m><; C:\WINDOWS\c0nima.exe> []
<KavPFW><; "C:\KAV2006\KPFW32.EXE"> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<KavStart><; "C:\KAV2006\KAVStart.exe" -startup> [N/A]
<KAVUpdate><; C:\KAV2006\Update.exe /Slience> [N/A]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<l><; C:\WINDOWS\rundl13a.exe> []
<m6fzuze><; C:\WINDOWS\Servera.exe> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<mhs2><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\mhs2.exe> []
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<MSMSGS><; "C:\Program Files\Messenger\msmsgs.exe" /background> [(Verified)Microsoft Windows Publisher]
<myZt2><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Zt2\SVCH0ST.EXE> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<NvCplDaemon><; RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup> [NVIDIA Corporation]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<NVIEW><; rundll32.exe nview.dll,nViewLoadHook> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<NvMediaCenter><; RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit> [NVIDIA Corporation]
<nwiz><; nwiz.exe /install> []
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<qkyzixhejew5c8b><; C:\WINDOWS\Servera.exe> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<runeip><; C:\Program Files\Rising\AntiSpyware\runiep.exe> [Beijing Rising Technology Co., Ltd.]
<rxzs><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\rxzs.exe> [N/A]
<SoundMan><; SOUNDMAN.EXE> [Realtek Semiconductor Corp.]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<svc><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\spolive.exe> [Microsoft Corporation]
<svcshare><; C:\WINDOWS\system32\drivers\sppoolsv.exe> [N/A]
<t3ufgbiq><; C:\WINDOWS\cftmoa.exe> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<TkBellExe><; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<tlg02d7gw><; C:\WINDOWS\crasoa.exe> []
<uxil453t4><; C:\WINDOWS\crasoa.exe> []
<wi6qg1z><; C:\WINDOWS\iexpl0ra.exe> []
<xr7><; C:\WINDOWS\c0nima.exe> []
<zmxzm><; C:\WINDOWS\winlog0a.exe> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<zts2><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\zts2.exe> []