瑞星卡卡安全论坛

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,
O3 - IE工具栏增项: Solid Converter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - F:\solid converter\SCPDF\ExploreExtPDF.dll
O4 - 启动项HKLM\\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - 启动项HKLM\\Run: [XJ-NC.Assistant] "C:\Program Files\XJ-NC\XJ-NC.Assistant.exe"
O4 - 启动项HKLM\\Run: [XJ-NC.Messages] "C:\Program Files\XJ-NC\XJ-NC.Messages.exe"
O4 - 启动项HKLM\\Run: [RfwMain] "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup
O4 - 启动项HKLM\\Run: [IMSCMig] C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [msnmsgr] "C:\DOCUME~1\Donna\LOCALS~1\Temp\Rar$EX00.445\msnmsgr\msnmsgr.exe" /background
O8 - IE右键菜单中的新增项目: 导出到 Microsoft Office Excel(&X) - res://D:\OFFICE11\EXCEL.EXE/3000
O10 - Broken Internet access because of LSP provider 'c:\documents and settings\donna\windows\system32\mswsock.dll' missing
O16 - DPF: {0CA54D3F-CEAE-48AF-9A2B-31909CB9515D} (Edit Class) - https://www.sz1.cmbchina.com/download/CMBEdit.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{CD4F0E55-4B14-4ABC-AFAE-DA44D0F5594E}: NameServer = 202.96.128.86 202.96.134.133
O20 - Winlogon Notify: BeTwinNotify - XJ-NC.Notify.dll (file missing)
O23 - NT 服务: Alerter - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\svchost.exe (file missing)
O23 - NT 服务: Application Layer Gateway Service (ALG) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\System32\alg.exe (file missing)
O23 - NT 服务: Application Management (AppMgmt) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\svchost.exe (file missing)
O23 - NT 服务: Windows Audio (AudioSrv) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\System32\svchost.exe (file missing)
O23 - NT 服务: Background Intelligent Transfer Service (BITS) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\svchost.exe (file missing)
O23 - NT 服务: Computer Browser (Browser) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\svchost.exe (file missing)
O23 - NT 服务: Indexing Service (CiSvc) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\cisvc.exe (file missing)
O23 - NT 服务: Cryptographic Services (CryptSvc) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\svchost.exe (file missing)
O23 - NT 服务: DCOM Server Process Launcher (DcomLaunch) - Unknown owner - C:\Documents.exe (file missing)
O23 - NT 服务: DHCP Client (Dhcp) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\svchost.exe (file missing)
O23 - NT 服务: Logical Disk Manager Administrative Service (dmadmin) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\System32\dmadmin.exe (file missing)
O23 - NT 服务: Logical Disk Manager (dmserver) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\System32\svchost.exe (file missing)
O23 - NT 服务: DNS Client (Dnscache) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\svchost.exe (file missing)
O23 - NT 服务: Error Reporting Service (ERSvc) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\System32\svchost.exe (file missing)
O23 - NT 服务: Event Log (Eventlog) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\services.exe (file missing)
O23 - NT 服务: Fast User Switching Compatibility (FastUserSwitchingCompatibility) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\System32\svchost.exe (file missing)
O23 - NT 服务: Fax - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\fxssvc.exe (file missing)
O23 - NT 服务: Help and Support (helpsvc) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\System32\svchost.exe (file missing)
O23 - NT 服务: HTTP SSL (HTTPFilter) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\System32\svchost.exe (file missing)
O23 - NT 服务: Server (lanmanserver) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\svchost.exe (file missing)
O23 - NT 服务: Workstation (lanmanworkstation) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\svchost.exe (file missing)
O23 - NT 服务: TCP/IP NetBIOS Helper (LmHosts) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\svchost.exe (file missing)
O23 - NT 服务: Net Logon (Netlogon) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\lsass.exe (file missing)
O23 - NT 服务: Network Connections (Netman) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\System32\svchost.exe (file missing)
O23 - NT 服务: Network Location Awareness (NLA) (Nla) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\svchost.exe (file missing)
O23 - NT 服务: NT LM Security Support Provider (NtLmSsp) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\lsass.exe (file missing)
O23 - NT 服务: Removable Storage (NtmsSvc) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\svchost.exe (file missing)
O23 - NT 服务: Plug and Play (PlugPlay) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\services.exe (file missing)
O23 - NT 服务: IPSEC Services (PolicyAgent) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\lsass.exe (file missing)
O23 - NT 服务: Protected Storage (ProtectedStorage) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\lsass.exe (file missing)
O23 - NT 服务: Remote Access Auto Connection Manager (RasAuto) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\svchost.exe (file missing)
O23 - NT 服务: Remote Access Connection Manager (RasMan) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\svchost.exe (file missing)
O23 - NT 服务: RDPSSW32 - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\System32\RDPSSW32.EXE (file missing)
O23 - NT 服务: Remote Registry (RemoteRegistry) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\svchost.exe (file missing)
O23 - NT 服务: Rising Proxy Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwproxy.exe
O23 - NT 服务: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwsrv.exe
O23 - NT 服务: Remote Procedure Call (RPC) Locator (RpcLocator) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\locator.exe (file missing)
O23 - NT 服务: Remote Procedure Call (RPC) (RpcSs) - Unknown owner - C:\Documents.exe (file missing)
O23 - NT 服务: QoS RSVP (RSVP) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\rsvp.exe (file missing)
O23 - NT 服务: Security Accounts Manager (SamSs) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\lsass.exe (file missing)
O23 - NT 服务: Smart Card (SCardSvr) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\System32\SCardSvr.exe (file missing)
O23 - NT 服务: Task Scheduler (Schedule) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\System32\svchost.exe (file missing)
O23 - NT 服务: Secondary Logon (seclogon) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\System32\svchost.exe (file missing)
O23 - NT 服务: System Event Notification (SENS) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\svchost.exe (file missing)
O23 - NT 服务: Windows Firewall/Internet Connection Sharing (ICS) (SharedAccess) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\svchost.exe (file missing)
O23 - NT 服务: Shell Hardware Detection (ShellHWDetection) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\System32\svchost.exe (file missing)
O23 - NT 服务: Print Spooler (Spooler) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\spoolsv.exe (file missing)
O23 - NT 服务: System Restore Service (srservice) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\svchost.exe (file missing)
O23 - NT 服务: SSDP Discovery Service (SSDPSRV) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\svchost.exe (file missing)
O23 - NT 服务: Windows Image Acquisition (WIA) (stisvc) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\svchost.exe (file missing)
O23 - NT 服务: Performance Logs and Alerts (SysmonLog) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\smlogsvc.exe (file missing)
O23 - NT 服务: Telephony (TapiSrv) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\System32\svchost.exe (file missing)
O23 - NT 服务: XJ-NC 终端服务 (TermService) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\System32\XJ-NC.ServiceXP.exe (file missing)
O23 - NT 服务: Themes - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\System32\svchost.exe (file missing)
O23 - NT 服务: Distributed Link Tracking Client (TrkWks) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\svchost.exe (file missing)
O23 - NT 服务: Universal Plug and Play Device Host (upnphost) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\svchost.exe (file missing)
O23 - NT 服务: Uninterruptible Power Supply (UPS) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\System32\ups.exe (file missing)
O23 - NT 服务: Volume Shadow Copy (VSS) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\System32\vssvc.exe (file missing)
O23 - NT 服务: Windows Time (W32Time) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\System32\svchost.exe (file missing)
O23 - NT 服务: WebClient - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\svchost.exe (file missing)
O23 - NT 服务: Windows Management Instrumentation (winmgmt) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\svchost.exe (file missing)
O23 - NT 服务: Portable Media Serial Number Service (WmdmPmSN) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\System32\svchost.exe (file missing)
O23 - NT 服务: Windows Management Instrumentation Driver Extensions (Wmi) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\System32\svchost.exe (file missing)
O23 - NT 服务: Security Center (wscsvc) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\System32\svchost.exe (file missing)
O23 - NT 服务: Automatic Updates (wuauserv) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\system32\svchost.exe (file missing)
O23 - NT 服务: Wireless Zero Configuration (WZCSVC) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\System32\svchost.exe (file missing)
O23 - NT 服务: Network Provisioning Service (xmlprov) - Unknown owner - C:\Documents and Settings\Donna\WINDOWS\System32\svchost.exe (file missing)