未知家族病毒分析
扫描结果:
无可疑文件


系统活动进程
C:\PROGRAM FILES\LOTUS\NOTES\NTMULTI.EXE
C:\PROGRAM FILES\INTEL\ASF AGENT\ASFAGENT.EXE
C:\PROGRAM FILES\INTEL\ASF AGENT\ASFCFGSV.DLL

C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\SYSTEM32\DRIVERS\CDAC11BA.EXE
D:\PROGRAM FILES\暴风影音\STORMLIV.EXE
D:\PROGRAM FILES\暴风影音\MSVCP60.DLL
D:\PROGRAM FILES\暴风影音\P2PCLIENT.DLL
D:\PROGRAM FILES\暴风影音\BFOPTDLL.DLL
D:\PROGRAM FILES\暴风影音\BOX\BOXLOG.DLL

C:\PROGRAM FILES\INTEL\WIRELESS\BIN\DOT1XCFG.EXE
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\ACAUTH.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\C1XSTNGS.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\PSREGAPI.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\INTSTNGS.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\TRACEAPI.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\IWMSPROV.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\C8021CHS.DLL
C:\PROGRAM FILES\COMMON FILES\LOGISHRD\LVMVFM\LVPRCINJ.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\LSAWRAPI.DLL
C:\WINDOWS\SYSTEM32\SOGOUPY.IME
D:\PROGRAM FILES\SOGOUINPUT\PLUGIN\SGIMEWORD.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\PFMGRAPI.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\LIBEAY32.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\DBENGINE.DLL

C:\PROGRAM FILES\SYMANTEC ANTIVIRUS\DEFWATCH.EXE
C:\WINDOWS\SYSTEM32\MSVCP71.DLL
C:\WINDOWS\SYSTEM32\MSVCR71.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCL40.DLL

C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM32\SOGOUPY.IME
D:\PROGRAM FILES\SOGOUINPUT\PLUGIN\SGIMEWORD.DLL
C:\WINDOWS\SYSTEM32\ACSIGNICON.DLL
C:\PROGRAM FILES\COMMON FILES\LOGISHRD\LVMVFM\LVPRCINJ.DLL
C:\WINDOWS\ATL.DLL
C:\PROGRAM FILES\COMMON FILES\AUTODESK SHARED\ACSIGNCORE16.DLL
C:\WINDOWS\SYSTEM32\WPDSHSERVICEOBJ.DLL
C:\WINDOWS\SYSTEM32\PORTABLEDEVICETYPES.DLL
C:\WINDOWS\SYSTEM32\PORTABLEDEVICEAPI.DLL
C:\WINDOWS\SYSTEM32\MSACM32.DRV
C:\PROGRAM FILES\360SAFE\SAFEMON\SAFEMON.DLL
D:\PROGRAM FILES\THUNDER\COMDLLS\TDATONCE_NOW.DLL
C:\WINDOWS\SYSTEM32\MSVCP71.DLL
C:\WINDOWS\SYSTEM32\MSVCR71.DLL
D:\PROGRAM FILES\THUNDER\COMDLLS\XUNLEIBHO_NOW.DLL
C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE11\MSOHEV.DLL
C:\PROGRAM FILES\COMMON FILES\ADOBE\ACROBAT\ACTIVEX\PDFSHELL.DLL
C:\PROGRAM FILES\COMMON FILES\ADOBE\ACROBAT\ACTIVEX\PDFSHELL.CHS
C:\PROGRAM FILES\WINRAR\RAREXT.DLL
C:\PROGRAM FILES\WAVE SYSTEMS CORP\SERVICES MANAGER\DOCMGR\BIN\DRIVEMENU.DLL
C:\PROGRAM FILES\WAVE SYSTEMS CORP\SERVICES MANAGER\DOCMGR\BIN\VAULTSERVER.DLL
C:\WINDOWS\SYSTEM32\WXVAULT.DLL
C:\WINDOWS\SYSTEM32\WPDSHEXT.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SSC\VPSHELL2.DLL
C:\PROGRAM FILES\WAVE SYSTEMS CORP\SERVICES MANAGER\DOCMGR\BIN\CONTEXTMENUITEM.DLL

C:\PROGRAM FILES\INTEL\WIRELESS\BIN\EVTENG.EXE
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\PFMGRAPI.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\LIBEAY32.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\TRACEAPI.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\PSREGAPI.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\DBENGINE.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\INTSTNGS.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\MUROCAPI.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\S24MUDLL.DLL

C:\PROGRAM FILES\COMMON FILES\LOGISHRD\LVCOMSER\LVCOMSER.EXE
C:\PROGRAM FILES\COMMON FILES\LOGISHRD\LVCOMSER\LVCSCLI.DLL
C:\PROGRAM FILES\COMMON FILES\LOGISHRD\LVCOMSER\LVCSPS.DLL

C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\VS7DEBUG\MDM.EXE
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\VS7DEBUG\2052\MDMUI.DLL

C:\WINDOWS\SYSTEM32\SMSS.EXE
C:\WINDOWS\SYSTEM32\CSRSS.EXE
C:\WINDOWS\SYSTEM32\WINLOGON.EXE
C:\WINDOWS\SYSTEM32\SOGOUPY.IME
C:\WINDOWS\SYSTEM32\NAVLOGON.DLL
C:\WINDOWS\SYSTEM32\MSACM32.DRV

C:\WINDOWS\SYSTEM32\SERVICES.EXE
C:\WINDOWS\APPPATCH\ACADPROC.DLL

C:\WINDOWS\SYSTEM32\LSASS.EXE
C:\WINDOWS\SYSTEM32\WVAUTH.DLL
C:\WINDOWS\SYSTEM32\BIOLSP.DLL

C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\PROGRA~1\SYMANT~1\VPTRAY.EXE
C:\WINDOWS\SYSTEM32\MSVCP71.DLL
C:\WINDOWS\SYSTEM32\MSVCR71.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCL40.DLL
C:\PROGRAM FILES\SYMANTEC ANTIVIRUS\SAVRT32.DLL
C:\WINDOWS\SYSTEM32\SOGOUPY.IME
D:\PROGRAM FILES\SOGOUINPUT\PLUGIN\SGIMEWORD.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSETEVT.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCVRTRST.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPROSUB.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCALERT.DLL
C:\PROGRAM FILES\SYMANTEC ANTIVIRUS\CLISCAN.DLL
C:\PROGRAM FILES\SYMANTEC ANTIVIRUS\NAVNTUTL.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSET.DLL
C:\PROGRAM FILES\SYMANTEC ANTIVIRUS\CLIPROXY.DLL

C:\WINDOWS\SYSTEM32\NVSVC32.EXE
C:\WINDOWS\SYSTEM32\NVAPI.DLL
C:\WINDOWS\SYSTEM32\SOGOUPY.IME

D:\SOFTWARE\RSDETECT.EXE
C:\PROGRAM FILES\COMMON FILES\LOGISHRD\LVMVFM\LVPRCINJ.DLL
C:\WINDOWS\SYSTEM32\SOGOUPY.IME
D:\PROGRAM FILES\SOGOUINPUT\PLUGIN\SGIMEWORD.DLL

C:\PROGRAM FILES\INTEL\WIRELESS\BIN\S24EVMON.EXE
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\LIBEAY32.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\TRACEAPI.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\PSREGAPI.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\INTSTNGS.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\IWMSPROV.DLL

C:\PROGRAM FILES\INTEL\WIRELESS\BIN\REGSRVC.EXE
C:\PROGRAM FILES\SYMANTEC ANTIVIRUS\RTVSCAN.EXE
C:\WINDOWS\SYSTEM32\MSVCP71.DLL
C:\WINDOWS\SYSTEM32\MSVCR71.DLL
C:\WINDOWS\SYSTEM32\CBA.DLL
C:\WINDOWS\SYSTEM32\MSGSYS.DLL
C:\WINDOWS\SYSTEM32\NTS.DLL
C:\WINDOWS\SYSTEM32\PDS.DLL
C:\PROGRAM FILES\SYMANTEC ANTIVIRUS\NAVLU.DLL
C:\WINDOWS\SYSTEM32\MFC71.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCL40.DLL
C:\PROGRAM FILES\SYMANTEC ANTIVIRUS\NAVNTUTL.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SSC\SCSCOMMS.DLL
C:\PROGRAM FILES\SYMANTEC ANTIVIRUS\I2LDVP3.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCVRTRST.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCDEC.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\DECOMPOSERS\DECSDK.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\DECOMPOSERS\DEC2.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\DECOMPOSERS\DEC2ID.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\DECOMPOSERS\DEC2ZIP.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\DECOMPOSERS\DEC2SS.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\DECOMPOSERS\DEC2GZIP.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\DECOMPOSERS\DEC2CAB.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\DECOMPOSERS\DEC2LHA.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\DECOMPOSERS\DEC2ARJ.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\DECOMPOSERS\DEC2TNEF.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\DECOMPOSERS\DEC2LZ.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\DECOMPOSERS\DEC2AMG.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\DECOMPOSERS\DEC2RAR.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\DECOMPOSERS\DEC2TAR.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\DECOMPOSERS\DEC2RTF.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\DECOMPOSERS\DEC2TEXT.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSCAN.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\ECMLDR32.DLL
C:\PROGRAM FILES\SYMANTEC ANTIVIRUS\DEFUTDCD.DLL
C:\PROGRAM FILES\SYMANTEC ANTIVIRUS\SAVRT32.DLL
C:\PROGRAM FILES\SYMANTEC ANTIVIRUS\IMAIL.DLL
C:\PROGRAM FILES\SYMANTEC ANTIVIRUS\NOTESEXT.DLL
C:\PROGRAM FILES\SYMANTEC ANTIVIRUS\VPMSECE4.DLL
C:\PROGRAM FILES\SYMANTEC ANTIVIRUS\SYMPROTECTSTORAGE.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SPBBC\SPBBCEVT.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SSC\SCANDLGS.DLL
C:\PROGRAM FILES\SYMANTEC ANTIVIRUS\CLISCAN.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SSC\LDVPCTLS.OCX
C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20090311.003\CCERASER.DLL
C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20090311.003\ECMSVR32.DLL
C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20090311.003\NAVEX32A.DLL
C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20090311.003\NAVENG32.DLL

C:\WINDOWS\SYSTEM32\STACSV.EXE
C:\WINDOWS\SYSTEM32\MSACM32.DRV
C:\WINDOWS\SYSTEM32\STACAPI.DLL

C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
D:\PROGRAM FILES\SKYPE\PHONE\SKYPE.EXE
D:\PROGRAM FILES\SKYPE\PHONE\SKMSG.DLL
D:\PROGRAM FILES\SKYPE\PHONE\SKTRANSFER.DLL
C:\PROGRAM FILES\COMMON FILES\LOGISHRD\LVMVFM\LVPRCINJ.DLL
C:\WINDOWS\SYSTEM32\SOGOUPY.IME
D:\PROGRAM FILES\SOGOUINPUT\PLUGIN\SGIMEWORD.DLL
C:\WINDOWS\SYSTEM32\MSACM32.DRV
C:\WINDOWS\SYSTEM32\MACROMED\FLASH\FLASH10B.OCX

C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\WINDOWS\SYSTEM32\MSVCP71.DLL
C:\WINDOWS\SYSTEM32\MSVCR71.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCL40.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCVRTRST.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSET.DLL
C:\PROGRA~1\COMMON~1\SYMANT~1\SPBBC\SPBBCEVT.DLL
C:\PROGRA~1\COMMON~1\SYMANT~1\CCSETEVT.DLL

C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSETMGR.EXE
C:\WINDOWS\SYSTEM32\MSVCP71.DLL
C:\WINDOWS\SYSTEM32\MSVCR71.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCL40.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCVRTRST.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSETEVT.DLL

C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SPBBC\SPBBCSVC.EXE
C:\WINDOWS\SYSTEM32\MSVCP71.DLL
C:\WINDOWS\SYSTEM32\MSVCR71.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCVRTRST.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCL40.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSET.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SPBBC\SPBBCEVT.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SPBBC\BBRGEN.DLL

C:\WINDOWS\SYSTEM32\SPOOLSV.EXE
C:\WINDOWS\SYSTEM32\MDIMON.DLL
C:\WINDOWS\SYSTEM32\SPOOL\PRTPROCS\W32X86\MDIPPR.DLL

C:\PROGRAM FILES\COMMON FILES\LOGISHRD\LVMVFM\LVPRCSRV.EXE
C:\WINDOWS\SYSTEM32\SCARDSVR.EXE
C:\PROGRAM FILES\NTRU CRYPTOSYSTEMS\NTRU TCG SOFTWARE STACK\BIN\TCSD_WIN32.EXE
C:\WINDOWS\SYSTEM32\TPMDDL.DLL

C:\PROGRAM FILES\WAVE SYSTEMS CORP\TRUSTED DRIVE MANAGER\TDMSERVICE.EXE
C:\WINDOWS\SYSTEM32\MSCOREE.DLL
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\MSCORWKS.DLL
C:\WINDOWS\ASSEMBLY\NATIVEIMAGES_V2.0.50727_32\MSCORLIB\7256562A1E6EBE423BC778489977F1A9\MSCORLIB.NI.DLL
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\MSCORJIT.DLL
C:\WINDOWS\ASSEMBLY\GAC_MSIL\SYSTEM.SERVICEPROCESS\2.0.0.0__B03F5F7F11D50A3A\SYSTEM.SERVICEPROCESS.DLL
C:\WINDOWS\ASSEMBLY\NATIVEIMAGES_V2.0.50727_32\SYSTEM\78989B9438AB14D1C4D36C6F9C78D053\SYSTEM.NI.DLL
C:\WINDOWS\ASSEMBLY\GAC_MSIL\SYSTEM.RUNTIME.REMOTING\2.0.0.0__B77A5C561934E089\SYSTEM.RUNTIME.REMOTING.DLL
C:\WINDOWS\ASSEMBLY\NATIVEIMAGES_V2.0.50727_32\SYSTEM.DRAWING\3032582CEBE299EEA21945827BB51213\SYSTEM.DRAWING.NI.DLL
C:\WINDOWS\ASSEMBLY\NATIVEIMAGES_V2.0.50727_32\SYSTEM.WINDOWS.FORMS\13261E265874586E625983D24F607DBE\SYSTEM.WINDOWS.FORMS.NI.DLL
C:\PROGRAM FILES\WAVE SYSTEMS CORP\TRUSTED DRIVE MANAGER\TDMPROXY.DLL
C:\PROGRAM FILES\WAVE SYSTEMS CORP\TRUSTED DRIVE MANAGER\TDMUTIL.DLL
C:\WINDOWS\ASSEMBLY\GAC_MSIL\SYSTEM.MANAGEMENT\2.0.0.0__B03F5F7F11D50A3A\SYSTEM.MANAGEMENT.DLL
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\WMINET_UTILS.DLL

C:\WINDOWS\SYSTEM32\DLLHOST.EXE
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\WLKEEPER.EXE
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\PFMGRAPI.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\LIBEAY32.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\TRACEAPI.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\PSREGAPI.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\DBENGINE.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\INTSTNGS.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\MUROCAPI.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\S24MUDLL.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\C1XSTNGS.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\C8021CHS.DLL
C:\WINDOWS\SYSTEM32\SOGOUPY.IME

C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\POWERDVD.EXE
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\MFC71.DLL
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\MSVCR71.DLL
C:\PROGRAM FILES\COMMON FILES\LOGISHRD\LVMVFM\LVPRCINJ.DLL
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\KOAN\PYTHON24.DLL
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\ZLIB.PYD
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\KOAN\_WINGDI.DLL
C:\WINDOWS\SYSTEM32\MFC71U.DLL
C:\WINDOWS\SYSTEM32\MSVCP71.DLL
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\KOAN\_IMAGE.DLL
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\KOAN\_RDDETECT.DLL
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\KOAN\_INTERPOLATOR.DLL
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\KOAN\_FONT.DLL
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\MM\_HWCOMMUNICATOR.DLL
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\MM\_SWCOMMUNICATOR.DLL
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\KOAN\_BSDDB.PYD
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\MM\_CLIMAGE.DLL
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\MM\_DEVICE.DLL
C:\WINDOWS\SYSTEM32\SOGOUPY.IME
D:\PROGRAM FILES\SOGOUINPUT\PLUGIN\SGIMEWORD.DLL
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\KERNEL\COMMON\CLDEVICEDETECTOR.DLL
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\KOAN\_SOCKET.PYD
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\KOAN\_SSL.PYD
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\MM\_BIGBANG.DLL
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\MM\_EXTENSION.DLL
C:\WINDOWS\SYSTEM32\ATL71.DLL
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\KOAN\WINSOUND.PYD
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\KOAN\_RDGDI.DLL
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\KOAN\_ALLOCATOR.DLL
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\KOAN\PYEXPAT.PYD
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\MM\_WINPROC.DLL
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\KERNEL\COMMON\CLRCENGINE3.DLL
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\MM\_USERCAP.DLL
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\MM\_AUDIOMIXER.DLL
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\CLAUMIXER.DLL
C:\WINDOWS\SYSTEM32\MSACM32.DRV
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\MM\_CLPLAYER.DLL
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\MM\_CLBDPLAYER.DLL
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\KERNEL\MOVIE\CLNAVX.AX
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\MM\_CLDKAWRAP.DLL
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\KERNEL\MOVIE\CLDSHOWX.DLL
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\KERNEL\MOVIE\CLAUD.AX
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\KERNEL\MOVIE\CLVSD.AX
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\KERNEL\MOVIE\CLLINE21.AX
C:\WINDOWS\SYSTEM32\LVCODEC2.DLL
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\KERNEL\MOVIE\CLADR.AX
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\KERNEL\MOVIE\CLAUTS.AX
C:\PROGRAM FILES\CYBERLINK\POWERDVD DX\KERNEL\MOVIE\CLDS.DLL

C:\WINDOWS\SYSTEM32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\SYSTEM32\DLLHOST.EXE
C:\PROGRAM FILES\COMMON FILES\LOGISHRD\LVCOMSER\LVCOMSER.EXE
C:\PROGRAM FILES\COMMON FILES\LOGISHRD\LVMVFM\LVPRCINJ.DLL
C:\PROGRAM FILES\COMMON FILES\LOGISHRD\LVCOMSER\LVCSCLI.DLL
C:\PROGRAM FILES\COMMON FILES\LOGISHRD\LVCOMSER\LVCSPS.DLL
C:\WINDOWS\SYSTEM32\SOGOUPY.IME
D:\PROGRAM FILES\SOGOUINPUT\PLUGIN\SGIMEWORD.DLL

C:\WINDOWS\SYSTEM32\ALG.EXE
C:\WINDOWS\SYSTEM32\CTFMON.EXE
C:\PROGRAM FILES\COMMON FILES\LOGISHRD\LVMVFM\LVPRCINJ.DLL
C:\WINDOWS\SYSTEM32\SOGOUPY.IME
D:\PROGRAM FILES\SOGOUINPUT\PLUGIN\SGIMEWORD.DLL

C:\PROGRAM FILES\DELLTPAD\APOINT.EXE
C:\PROGRAM FILES\COMMON FILES\LOGISHRD\LVMVFM\LVPRCINJ.DLL
C:\PROGRAM FILES\DELLTPAD\APOINT.DLL
C:\WINDOWS\SYSTEM32\VXDIF.DLL
C:\PROGRAM FILES\DELLTPAD\EZAUTO.DLL
C:\WINDOWS\SYSTEM32\SOGOUPY.IME
D:\PROGRAM FILES\SOGOUINPUT\PLUGIN\SGIMEWORD.DLL

C:\WINDOWS\SYSTEM32\RUNDLL32.EXE
C:\PROGRAM FILES\COMMON FILES\LOGISHRD\LVMVFM\LVPRCINJ.DLL
C:\WINDOWS\SYSTEM32\NVHOTKEY.DLL
C:\WINDOWS\SYSTEM32\SOGOUPY.IME
D:\PROGRAM FILES\SOGOUINPUT\PLUGIN\SGIMEWORD.DLL

C:\WINDOWS\SYSTEM32\RUNDLL32.EXE
C:\PROGRAM FILES\COMMON FILES\LOGISHRD\LVMVFM\LVPRCINJ.DLL
C:\WINDOWS\SYSTEM32\NVMCTRAY.DLL
C:\WINDOWS\SYSTEM32\NVAPI.DLL
C:\WINDOWS\SYSTEM32\SOGOUPY.IME
D:\PROGRAM FILES\SOGOUINPUT\PLUGIN\SGIMEWORD.DLL
C:\WINDOWS\SYSTEM32\NVRSZHC.DLL

C:\PROGRAM FILES\JAVA\JRE1.6.0_07\BIN\JUSCHED.EXE
C:\PROGRAM FILES\COMMON FILES\LOGISHRD\LVMVFM\LVPRCINJ.DLL

C:\PROGRAM FILES\DELLTPAD\APMSGFWD.EXE
C:\PROGRAM FILES\COMMON FILES\LOGISHRD\LVMVFM\LVPRCINJ.DLL
C:\WINDOWS\SYSTEM32\SOGOUPY.IME
D:\PROGRAM FILES\SOGOUINPUT\PLUGIN\SGIMEWORD.DLL

C:\PROGRAM FILES\SYMANTEC ANTIVIRUS\VPC32.EXE
C:\WINDOWS\SYSTEM32\MFC71.DLL
C:\WINDOWS\SYSTEM32\MSVCR71.DLL
C:\WINDOWS\SYSTEM32\MSVCP71.DLL
C:\WINDOWS\SYSTEM32\SOGOUPY.IME
D:\PROGRAM FILES\SOGOUINPUT\PLUGIN\SGIMEWORD.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SSC\LDVPTASK.OCX
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SSC\LDVPVIEW.OCX
C:\PROGRAM FILES\SYMANTEC ANTIVIRUS\NAVNTUTL.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SSC\LDVPCTLS.OCX
C:\PROGRAM FILES\SYMANTEC ANTIVIRUS\CLIPROXY.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SSC\SCSCOMMS.DLL
C:\WINDOWS\SYSTEM32\NTS.DLL
C:\WINDOWS\SYSTEM32\CBA.DLL
C:\WINDOWS\SYSTEM32\MSGSYS.DLL
C:\WINDOWS\SYSTEM32\PDS.DLL

C:\PROGRAM FILES\DELLTPAD\APNTEX.EXE
C:\WINDOWS\SYSTEM32\VXDIF.DLL
C:\PROGRAM FILES\DELLTPAD\APOINT.DLL
C:\PROGRAM FILES\COMMON FILES\LOGISHRD\LVMVFM\LVPRCINJ.DLL
C:\WINDOWS\SYSTEM32\SOGOUPY.IME
D:\PROGRAM FILES\SOGOUINPUT\PLUGIN\SGIMEWORD.DLL

C:\PROGRAM FILES\DELLTPAD\HIDFIND.EXE
C:\PROGRAM FILES\COMMON FILES\LOGISHRD\LVMVFM\LVPRCINJ.DLL
C:\WINDOWS\SYSTEM32\SOGOUPY.IME
D:\PROGRAM FILES\SOGOUINPUT\PLUGIN\SGIMEWORD.DLL

C:\WINDOWS\SYSTEM32\CONIME.EXE
C:\PROGRAM FILES\COMMON FILES\LOGISHRD\LVMVFM\LVPRCINJ.DLL
C:\WINDOWS\SYSTEM32\SOGOUPY.IME
D:\PROGRAM FILES\SOGOUINPUT\PLUGIN\SGIMEWORD.DLL

C:\PROGRAM FILES\INTEL\WIRELESS\BIN\ZCFGSVC.EXE
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\PFMGRAPI.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\LIBEAY32.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\TRACEAPI.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\PSREGAPI.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\DBENGINE.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\INTSTNGS.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\MUROCAPI.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\S24MUDLL.DLL
C:\PROGRAM FILES\COMMON FILES\LOGISHRD\LVMVFM\LVPRCINJ.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\ZCSVCCHS.DLL
C:\WINDOWS\SYSTEM32\SOGOUPY.IME
D:\PROGRAM FILES\SOGOUINPUT\PLUGIN\SGIMEWORD.DLL

C:\PROGRAM FILES\INTEL\WIRELESS\BIN\IFRMEWRK.EXE
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\PSREGAPI.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\INTSTNGS.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\TRACEAPI.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\MUROCAPI.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\S24MUDLL.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\LIBEAY32.DLL
C:\PROGRAM FILES\COMMON FILES\LOGISHRD\LVMVFM\LVPRCINJ.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\FRWRKCHS.DLL
C:\WINDOWS\SYSTEM32\SOGOUPY.IME
D:\PROGRAM FILES\SOGOUINPUT\PLUGIN\SGIMEWORD.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\FRAMEWORKPLUGINS\CONNMGR.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\PFMGRAPI.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\DBENGINE.DLL
C:\PROGRAM FILES\INTEL\WIRELESS\BIN\INTWACHS.DLL
C:\WINDOWS\SYSTEM32\MSACM32.DRV

C:\PROGRAM FILES\WAVE SYSTEMS CORP\SERVICES MANAGER\DOCMGR\BIN\WAVXDOCMGR.EXE
C:\PROGRAM FILES\WAVE SYSTEMS CORP\SERVICES MANAGER\DOCMGR\BIN\WAVXVLTMGRWRP.DLL
C:\PROGRAM FILES\WAVE SYSTEMS CORP\SERVICES MANAGER\DOCMGR\BIN\VAULTSERVER.DLL
C:\WINDOWS\SYSTEM32\WXVAULT.DLL
C:\PROGRAM FILES\WAVE SYSTEMS CORP\SERVICES MANAGER\DOCMGR\BIN\CONVERTTODM40.DLL
C:\PROGRAM FILES\COMMON FILES\LOGISHRD\LVMVFM\LVPRCINJ.DLL
C:\WINDOWS\SYSTEM32\SOGOUPY.IME
D:\PROGRAM FILES\SOGOUINPUT\PLUGIN\SGIMEWORD.DLL

C:\PROGRAM FILES\WAVE SYSTEMS CORP\SECUREUPGRADE.EXE
C:\WINDOWS\SYSTEM32\MSCOREE.DLL
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\MSCORWKS.DLL
C:\PROGRAM FILES\COMMON FILES\LOGISHRD\LVMVFM\LVPRCINJ.DLL
C:\WINDOWS\ASSEMBLY\NATIVEIMAGES_V2.0.50727_32\MSCORLIB\7256562A1E6EBE423BC778489977F1A9\MSCORLIB.NI.DLL
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\MSCORSEC.DLL
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\MSCORJIT.DLL
C:\WINDOWS\SYSTEM32\SOGOUPY.IME
D:\PROGRAM FILES\SOGOUINPUT\PLUGIN\SGIMEWORD.DLL

C:\PROGRAM FILES\SIGMATEL\C-MAJOR AUDIO\WDM\STSYSTRA.EXE
C:\PROGRAM FILES\SIGMATEL\C-MAJOR AUDIO\WDM\STLANG.DLL
C:\PROGRAM FILES\COMMON FILES\LOGISHRD\LVMVFM\LVPRCINJ.DLL
C:\WINDOWS\SYSTEM32\SOGOUPY.IME
D:\PROGRAM FILES\SOGOUINPUT\PLUGIN\SGIMEWORD.DLL
C:\WINDOWS\SYSTEM32\STACAPI.DLL
C:\WINDOWS\SYSTEM32\MSACM32.DRV

C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\WINDOWS\SYSTEM32\MSVCP71.DLL
C:\WINDOWS\SYSTEM32\MSVCR71.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCL40.DLL
C:\WINDOWS\SYSTEM32\SOGOUPY.IME
D:\PROGRAM FILES\SOGOUINPUT\PLUGIN\SGIMEWORD.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCVRTRST.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSET.DLL
C:\PROGRA~1\COMMON~1\SYMANT~1\CCALERT.DLL
C:\PROGRA~1\COMMON~1\SYMANT~1\CCEMLPXY.DLL
C:\PROGRA~1\COMMON~1\SYMANT~1\RCEMLPXY.DLL
C:\WINDOWS\SYSTEM32\SYMREDIR.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSETEVT.DLL
C:\PROGRAM FILES\SYMANTEC ANTIVIRUS\SAVEMAIL.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPROSUB.DLL

D:\PROGRAM FILES\THUNDER\PROGRAM\THUNDER5.EXE
D:\PROGRAM FILES\THUNDER\PROGRAM\BUGREPORT.DLL
D:\PROGRAM FILES\THUNDER\PROGRAM\THUNDEREX.DLL
C:\WINDOWS\SYSTEM32\SOGOUPY.IME
D:\PROGRAM FILES\SOGOUINPUT\PLUGIN\SGIMEWORD.DLL
C:\PROGRAM FILES\COMMON FILES\LOGISHRD\LVMVFM\LVPRCINJ.DLL
D:\PROGRAM FILES\THUNDER\PROGRAM\TASKMANAGER.DLL
D:\PROGRAM FILES\THUNDER\PROGRAM\DOWNLOAD_INTERFACE.DLL
D:\PROGRAM FILES\THUNDER\PROGRAM\MP.DLL
C:\WINDOWS\SYSTEM32\MSVCP71.DLL
C:\WINDOWS\SYSTEM32\MSVCR71.DLL
D:\PROGRAM FILES\THUNDER\PROGRAM\ASYN_FRAME.DLL
C:\WINDOWS\SYSTEM32\ATL71.DLL
D:\PROGRAM FILES\THUNDER\PROGRAM\XLNET.DLL
D:\PROGRAM FILES\THUNDER\PROGRAM\BHOSTUB.DLL
D:\PROGRAM FILES\THUNDER\COMPONENTS\DOWNANDPLAY\DOWNANDPLAY.DLL
D:\PROGRAM FILES\THUNDER\PROGRAM\BACKEND_AGENT.DLL
D:\PROGRAM FILES\THUNDER\PROGRAM\ZLIB1.DLL
D:\PROGRAM FILES\THUNDER\PROGRAM\PTL.DLL
D:\PROGRAM FILES\THUNDER\PROGRAM\DL_PEER_ID.DLL
D:\PROGRAM FILES\THUNDER\PROGRAM\XL_STAT.DLL
D:\PROGRAM FILES\THUNDER\PROGRAM\P2P_NETWORK_COM.DLL
D:\PROGRAM FILES\THUNDER\PROGRAM\P2SP.DLL
D:\PROGRAM FILES\THUNDER\PROGRAM\FS.DLL
D:\PROGRAM FILES\THUNDER\PROGRAM\DOWN_DISPATCHER.DLL
D:\PROGRAM FILES\THUNDER\PROGRAM\P2P_UPLOAD.DLL
D:\PROGRAM FILES\THUNDER\PROGRAM\P2P.DLL
D:\PROGRAM FILES\THUNDER\PROGRAM\XLDC.DLL
D:\PROGRAM FILES\THUNDER\PROGRAM\ITARGETAD.DLL
D:\PROGRAM FILES\THUNDER\PROGRAM\STREAM.DLL
D:\PROGRAM FILES\THUNDER\PROGRAM\P2P_LOCAL_RES.DLL
D:\PROGRAM FILES\THUNDER\PROGRAM\AL.DLL
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\OFFICE11\MSOXMLMF.DLL
D:\PROGRAM FILES\THUNDER\COMPONENTS\COMMUNITY\XLCOMMUNITY.DLL
D:\PROGRAM FILES\THUNDER\PROGRAM\XLCOMMUNITYEX.DLL
D:\PROGRAM FILES\THUNDER\PROGRAM\REGISTERDLL.DLL
D:\PROGRAM FILES\THUNDER\PROGRAM\IMDT.DLL
D:\PROGRAM FILES\THUNDER\COMPONENTS\SECURITY\THUNDERSAFE.DLL
D:\PROGRAM FILES\THUNDER\COMPONENTS\SECURITY\CONFIGMANAGER.DLL
D:\PROGRAM FILES\THUNDER\COMPONENTS\SECURITY\SAFEMANAGER.DLL
D:\PROGRAM FILES\THUNDER\COMPONENTS\SECURITY\SAFESTATISTIC.DLL
D:\PROGRAM FILES\THUNDER\PROGRAM\XLNETU.DLL
D:\PROGRAM FILES\THUNDER\PLUGINS\XLSAFEHOST\XLSAFEHOST.DLL
D:\PROGRAM FILES\THUNDER\COMPONENTS\SEARCH\XLSEARCH.DLL
D:\PROGRAM FILES\THUNDER\COMPONENTS\XLSOFTBASE\DRTHUNDERHOST.DLL
D:\PROGRAM FILES\THUNDER\COMPONENTS\XLSOFTBASE\DRKERNEL.DLL
D:\PROGRAM FILES\THUNDER\COMPONENTS\XLSOFTBASE\DRSOFTIDENTIFIER.DLL
D:\PROGRAM FILES\THUNDER\COMPONENTS\XLSOFTBASE\DRUPDATE.DLL
D:\PROGRAM FILES\THUNDER\COMPONENTS\EXPLORERHELPER\EXPLORERHELPER.DLL
D:\PROGRAM FILES\THUNDER\PROGRAM\EMULE_ID.DLL
D:\PROGRAM FILES\THUNDER\COMPONENTS\TIPS\TIPSCLIENT.DLL
D:\PROGRAM FILES\THUNDER\COMPONENTS\TIPS\XLIPC.DLL
D:\PROGRAM FILES\THUNDER\COMPONENTS\DOWNLOADSTAT\DOWNLOADSTAT.DLL
C:\WINDOWS\SYSTEM32\MSACM32.DRV
D:\PROGRAM FILES\THUNDER\PROGRAM\BD.DLL

D:\PROGRAM FILES\遨游\MAXTHON2\MAXTHON.EXE
D:\PROGRAM FILES\遨游\MAXTHON2\MXPP.DLL
D:\PROGRAM FILES\遨游\MAXTHON2\MXSK.DLL
D:\PROGRAM FILES\遨游\MAXTHON2\MXPROXY2.DLL
D:\PROGRAM FILES\遨游\MAXTHON2\MXEXT.DLL
D:\PROGRAM FILES\遨游\MAXTHON2\MXUI.DLL
C:\PROGRAM FILES\COMMON FILES\LOGISHRD\LVMVFM\LVPRCINJ.DLL
C:\WINDOWS\SYSTEM32\SOGOUPY.IME
D:\PROGRAM FILES\SOGOUINPUT\PLUGIN\SGIMEWORD.DLL
D:\PROGRAM FILES\遨游\MAXTHON2\MXTOOL.DLL
D:\PROGRAM FILES\遨游\MAXTHON2\MAXZLIB.DLL
C:\WINDOWS\SYSTEM32\ACSIGNICON.DLL
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\OFFICE11\MSOXMLMF.DLL
D:\PROGRAM FILES\遨游\MAXTHON2\MODULES\MXWEBBOOST\MXWEBBOOST.DLL
D:\PROGRAM FILES\遨游\MAXTHON2\MXDB.DLL
D:\PROGRAM FILES\遨游\MAXTHON2\MODULES\MXHISTORY\MXHISTORY.DLL
C:\WINDOWS\SYSTEM32\MSACM32.DRV
C:\WINDOWS\SYSTEM32\MACROMED\FLASH\FLASH10B.OCX
D:\PROGRAM FILES\THUNDER\COMDLLS\XUNLEIBHO_NOW.DLL
D:\PROGRAM FILES\THUNDER\COMDLLS\THUNDERAGENT_NOW.DLL
C:\WINDOWS\SYSTEM32\MSVCP71.DLL
C:\WINDOWS\SYSTEM32\MSVCR71.DLL
C:\WINDOWS\SYSTEM32\MSCOREE.DLL
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\MSCORIE.DLL

D:\PROGRAM FILES\SKYPE\PLUGIN MANAGER\SKYPEPM.EXE
C:\PROGRAM FILES\COMMON FILES\LOGISHRD\LVMVFM\LVPRCINJ.DLL
C:\WINDOWS\SYSTEM32\SOGOUPY.IME
D:\PROGRAM FILES\SOGOUINPUT\PLUGIN\SGIMEWORD.DLL
D:\PROGRAM FILES\SKYPE\PLUGIN MANAGER\EZPMUTILS.DLL


普通自启动项
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
IMJPMIG8.1 = "C:\WINDOWS\IME\IMJP8_1\IMJPMIG.EXE" /SPOIL /REMADVDEF /MIGRATION32
Apoint = C:\PROGRAM FILES\DELLTPAD\APOINT.EXE
NvCplDaemon = RUNDLL32.EXE C:\WINDOWS\SYSTEM32\NVCPL.DLL,NVSTARTUP
nwiz = NWIZ.EXE /INSTALLQUIET
NVHotkey = RUNDLL32.EXE NVHOTKEY.DLL,START
NvMediaCenter = RUNDLL32.EXE C:\WINDOWS\SYSTEM32\NVMCTRAY.DLL,NVTASKBARINIT
SunJavaUpdateSched = "C:\PROGRAM FILES\JAVA\JRE1.6.0_07\BIN\JUSCHED.EXE"
IntelZeroConfig = "C:\PROGRAM FILES\INTEL\WIRELESS\BIN\ZCFGSVC.EXE"
IntelWireless = "C:\PROGRAM FILES\INTEL\WIRELESS\BIN\IFRMEWRK.EXE" /TF INTEL PROSET/WIRELESS
WavXMgr = C:\PROGRAM FILES\WAVE SYSTEMS CORP\SERVICES MANAGER\DOCMGR\BIN\WAVXDOCMGR.EXE
SecureUpgrade = C:\PROGRAM FILES\WAVE SYSTEMS CORP\SECUREUPGRADE.EXE
SigmatelSysTrayApp = %PROGRAMFILES%\SIGMATEL\C-MAJOR AUDIO\WDM\STSYSTRA.EXE
IMSCMig = C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /PRELOAD
ccApp = "C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE"
vptray = C:\PROGRA~1\SYMANT~1\VPTRAY.EXE
360Safetray = C:\PROGRAM FILES\360SAFE\SAFEMON\360TRAY.EXE /START
Adobe Reader Speed Launcher = "D:\PROGRAM FILES\ADOBE\READER 9.0\READER\READER_SL.EXE"
QQDoctorRTP = "D:\PROGRAM FILES\QQDOCTOR\QQDOCTORRTP.EXE"

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
ctfmon.exe = C:\WINDOWS\SYSTEM32\CTFMON.EXE


AppInit_DLLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
AppInit_DLLs = 


系统文件关联
.exe ==> exefile = "%1" %*
.com ==> comfile = "%1" %*
.cmd ==> cmdfile = "%1" %*
.bat ==> batfile = "%1" %*
.txt ==> txtfile = C:\WINDOWS\notepad.exe %1
.scr ==> scrfile = "%1" /S
.reg ==> regfile = regedit.exe "%1"
.doc ==> Word.Document.8 = "C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE" /n /dde

其它启动项
WIN.INI
无信息

SYSTEM.INI
SHELL = Explorer.exe


Winlogon 启动项
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
crypt32chain = CRYPT32.DLL
cryptnet = CRYPTNET.DLL
cscdll = CSCDLL.DLL
dimsntfy = C:\WINDOWS\SYSTEM32\DIMSNTFY.DLL
gemsafe = C:\PROGRAM FILES\GEMPLUS\GEMSAFE LIBRARIES\BIN\WLEVENTNOTIFY.DLL
NavLogon = C:\WINDOWS\SYSTEM32\NAVLOGON.DLL
ScCertProp = WLNOTIFY.DLL
Schedule = WLNOTIFY.DLL
sclgntfy = SCLGNTFY.DLL
SensLogn = WLNOTIFY.DLL
termsrv = WLNOTIFY.DLL
wlballoon = WLNOTIFY.DLL

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Userinit = C:\WINDOWS\SYSTEM32\USERINIT.EXE,
shell = EXPLORER.EXE


IE - BHO
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
{01443AEC-0FD1-40fd-9C87-E93D1494C233} = D:\Program Files\Thunder\ComDlls\TDAtOnce_Now.dll
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} = C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
{889D2FEB-5411-4565-8998-1DD2C5261283} = D:\Program Files\Thunder\ComDlls\xunleiBHO_Now.dll
{B69F34DD-F0F9-42DC-9EDD-957187DA688D} = C:\Program Files\360safe\safemon\safemon.dll


Winsock SPI
MSAFD Tcpip [TCP/IP] = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD Tcpip [UDP/IP] = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD Tcpip [RAW/IP] = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
RSVP UDP Service Provider = C:\WINDOWS\SYSTEM32\RSVPSP.DLL
RSVP TCP Service Provider = C:\WINDOWS\SYSTEM32\RSVPSP.DLL
MSAFD RfComm [Bluetooth] = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{69ECB60D-0434-4A53-A849-1E25E8F4905A}] SEQPACKET 10 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{69ECB60D-0434-4A53-A849-1E25E8F4905A}] DATAGRAM 10 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{82F9871F-2D66-44B1-817D-8BC323FDD159}] SEQPACKET 9 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{82F9871F-2D66-44B1-817D-8BC323FDD159}] DATAGRAM 9 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{FC5FF3C3-F59E-4811-84C6-B0E25F6EE835}] SEQPACKET 6 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{FC5FF3C3-F59E-4811-84C6-B0E25F6EE835}] DATAGRAM 6 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{9410DFD8-F865-4407-BCD4-EF11D91AAFE3}] SEQPACKET 5 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{9410DFD8-F865-4407-BCD4-EF11D91AAFE3}] DATAGRAM 5 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{F0D79DC4-4B2D-4270-8D1F-B9E5CA5CCA17}] SEQPACKET 4 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{F0D79DC4-4B2D-4270-8D1F-B9E5CA5CCA17}] DATAGRAM 4 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{0A665FD0-979A-42BB-AABD-7D7AB2C3FBCC}] SEQPACKET 3 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{0A665FD0-979A-42BB-AABD-7D7AB2C3FBCC}] DATAGRAM 3 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{4208A90E-D882-4D73-9F09-63F21971840D}] SEQPACKET 0 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{4208A90E-D882-4D73-9F09-63F21971840D}] DATAGRAM 0 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{5B756DAA-EFCA-41A9-A1E2-7521FD200809}] SEQPACKET 1 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{5B756DAA-EFCA-41A9-A1E2-7521FD200809}] DATAGRAM 1 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{3311F9B2-3CB7-4D4D-BE18-EB2987917DD2}] SEQPACKET 2 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{3311F9B2-3CB7-4D4D-BE18-EB2987917DD2}] DATAGRAM 2 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{68B975F2-2825-4DFE-8BBC-1B27F5F53D1C}] SEQPACKET 7 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{68B975F2-2825-4DFE-8BBC-1B27F5F53D1C}] DATAGRAM 7 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{9D4A6B00-280C-4942-BBA7-D2E8FC604EB8}] SEQPACKET 8 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{9D4A6B00-280C-4942-BBA7-D2E8FC604EB8}] DATAGRAM 8 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL

系统服务项
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
Alerter = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K LOCALSERVICE
ALG = C:\WINDOWS\SYSTEM32\ALG.EXE
AppMgmt = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
ASFAgent = C:\PROGRAM FILES\INTEL\ASF AGENT\ASFAGENT.EXE
aspnet_state = C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\ASPNET_STATE.EXE
AudioSrv = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
BITS = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
Browser = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
BthServ = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K BTHSVCS
C-DillaCdaC11BA = C:\WINDOWS\SYSTEM32\DRIVERS\CDAC11BA.EXE
ccEvtMgr = "C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE"
ccosm = D:\PROGRAM FILES\暴风影音\STORMLIV.EXE /ASSERVICE
ccSetMgr = "C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSETMGR.EXE"
CiSvc = C:\WINDOWS\SYSTEM32\CISVC.EXE
ClipSrv = C:\WINDOWS\SYSTEM32\CLIPSRV.EXE
clr_optimization_v2.0.50727_32 = C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\MSCORSVW.EXE
COMSysApp = C:\WINDOWS\SYSTEM32\DLLHOST.EXE /PROCESSID:{02D4B3F1-FD88-11D1-960D-00805FC79235}
CryptSvc = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
DcomLaunch = C:\WINDOWS\SYSTEM32\SVCHOST -K DCOMLAUNCH
DefWatch = "C:\PROGRAM FILES\SYMANTEC ANTIVIRUS\DEFWATCH.EXE"
Dhcp = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
dmadmin = C:\WINDOWS\SYSTEM32\DMADMIN.EXE /COM
dmserver = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
Dnscache = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETWORKSERVICE
Dot3svc = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K DOT3SVC
EapHost = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K EAPSVCS
ERSvc = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
Eventlog = C:\WINDOWS\SYSTEM32\SERVICES.EXE
EventSystem = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
EvtEng = C:\PROGRAM FILES\INTEL\WIRELESS\BIN\EVTENG.EXE
FastUserSwitchingCompatibility = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
Fax = C:\WINDOWS\SYSTEM32\FXSSVC.EXE
helpsvc = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
HidServ = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
hkmsvc = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
HTTPFilter = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K HTTPFILTER
ImapiService = C:\WINDOWS\SYSTEM32\IMAPI.EXE
lanmanserver = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
lanmanworkstation = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
LiveUpdate = "C:\PROGRA~1\SYMANTEC\LIVEUP~1\LUCOMS~1.EXE"
LmHosts = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K LOCALSERVICE
LVCOMSer = "C:\PROGRAM FILES\COMMON FILES\LOGISHRD\LVCOMSER\LVCOMSER.EXE"
LVPrcSrv = "C:\PROGRAM FILES\COMMON FILES\LOGISHRD\LVMVFM\LVPRCSRV.EXE"
LVSrvLauncher = C:\PROGRAM FILES\COMMON FILES\LOGISHRD\SRVLNCH\SRVLNCH.EXE
MDM = "C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\VS7DEBUG\MDM.EXE"
Messenger = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
mnmsrvc = C:\WINDOWS\SYSTEM32\MNMSRVC.EXE
MSIServer = C:\WINDOWS\SYSTEM32\MSIEXEC.EXE /V
Multi-user Cleanup Service = "C:\PROGRAM FILES\LOTUS\NOTES\NTMULTI.EXE"
napagent = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
NetDDE = C:\WINDOWS\SYSTEM32\NETDDE.EXE
NetDDEdsdm = C:\WINDOWS\SYSTEM32\NETDDE.EXE
Netlogon = C:\WINDOWS\SYSTEM32\LSASS.EXE
Netman = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
Nla = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
NtLmSsp = C:\WINDOWS\SYSTEM32\LSASS.EXE
NtmsSvc = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
NVSvc = C:\WINDOWS\SYSTEM32\NVSVC32.EXE
ose = "C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\SOURCE ENGINE\OSE.EXE"
PlugPlay = C:\WINDOWS\SYSTEM32\SERVICES.EXE
PolicyAgent = C:\WINDOWS\SYSTEM32\LSASS.EXE
ProtectedStorage = C:\WINDOWS\SYSTEM32\LSASS.EXE
RasAuto = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
RasMan = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
RDSessMgr = C:\WINDOWS\SYSTEM32\SESSMGR.EXE
RegSrvc = C:\PROGRAM FILES\INTEL\WIRELESS\BIN\REGSRVC.EXE
RemoteAccess = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
RemoteRegistry = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K LOCALSERVICE
RpcLocator = C:\WINDOWS\SYSTEM32\LOCATOR.EXE
RpcSs = C:\WINDOWS\SYSTEM32\SVCHOST -K RPCSS
RSVP = C:\WINDOWS\SYSTEM32\RSVP.EXE
S24EventMonitor = C:\PROGRAM FILES\INTEL\WIRELESS\BIN\S24EVMON.EXE
SamSs = C:\WINDOWS\SYSTEM32\LSASS.EXE
SavRoam = "C:\PROGRAM FILES\SYMANTEC ANTIVIRUS\SAVROAM.EXE"
SCardSvr = C:\WINDOWS\SYSTEM32\SCARDSVR.EXE
Schedule = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
seclogon = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
SecureStorageService = "C:\PROGRAM FILES\WAVE SYSTEMS CORP\SECURE STORAGE MANAGER\SECURESTORAGESERVICE.EXE"
SENS = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
SharedAccess = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
ShellHWDetection = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
SNDSrvc = "C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SNDSRVC.EXE"
SPBBCSvc = "C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SPBBC\SPBBCSVC.EXE"
Spooler = C:\WINDOWS\SYSTEM32\SPOOLSV.EXE
srservice = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
SSDPSRV = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K LOCALSERVICE
STacSV = C:\WINDOWS\SYSTEM32\STACSV.EXE
stisvc = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K IMGSVC
SwPrv = C:\WINDOWS\SYSTEM32\DLLHOST.EXE /PROCESSID:{9DA65A6E-D7FA-4CC2-9872-83DE7F170374}
Symantec AntiVirus = "C:\PROGRAM FILES\SYMANTEC ANTIVIRUS\RTVSCAN.EXE"
SysmonLog = C:\WINDOWS\SYSTEM32\SMLOGSVC.EXE
TapiSrv = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
tcsd_win32.exe = "C:\PROGRAM FILES\NTRU CRYPTOSYSTEMS\NTRU TCG SOFTWARE STACK\BIN\TCSD_WIN32.EXE"
TdmService = C:\PROGRAM FILES\WAVE SYSTEMS CORP\TRUSTED DRIVE MANAGER\TDMSERVICE.EXE
TermService = C:\WINDOWS\SYSTEM32\SVCHOST -K DCOMLAUNCH
Themes = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
TlntSvr = C:\WINDOWS\SYSTEM32\TLNTSVR.EXE
TrkWks = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
upnphost = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K LOCALSERVICE
UPS = C:\WINDOWS\SYSTEM32\UPS.EXE
VSS = C:\WINDOWS\SYSTEM32\VSSVC.EXE
w32time = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
Wave UCSPlus = C:\WINDOWS\SYSTEM32\DLLHOST.EXE /PROCESSID:{BDFEFE06-0F3F-44F4-984D-3BF2A1CA8D75}
WaveEnrollmentService = "C:\PROGRAM FILES\WAVE SYSTEMS CORP\AUTHENTICATION MANAGER\WAVEENROLLMENTSERVICE.EXE"
WebClient = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K LOCALSERVICE
winmgmt = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
WLANKEEPER = C:\PROGRAM FILES\INTEL\WIRELESS\BIN\WLKEEPER.EXE
WmdmPmSN = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
Wmi = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
WmiApSrv = C:\WINDOWS\SYSTEM32\WBEM\WMIAPSRV.EXE
WMPNetworkSvc = "C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WMPNETWK.EXE"
wscsvc = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
wuauserv = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
WudfSvc = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K WUDFSERVICEGROUP
WZCSVC = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
xmlprov = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS


文件驱动
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
FltMgr = C:\WINDOWS\SYSTEM32\DRIVERS\FLTMGR.SYS
MRxDAV = C:\WINDOWS\SYSTEM32\DRIVERS\MRXDAV.SYS
MRxSmb = C:\WINDOWS\SYSTEM32\DRIVERS\MRXSMB.SYS
NetBIOS = C:\WINDOWS\SYSTEM32\DRIVERS\NETBIOS.SYS
Rdbss = C:\WINDOWS\SYSTEM32\DRIVERS\RDBSS.SYS
sr = C:\WINDOWS\SYSTEM32\DRIVERS\SR.SYS
Srv = C:\WINDOWS\SYSTEM32\DRIVERS\SRV.SYS
WavxDMgr = C:\WINDOWS\SYSTEM32\DRIVERS\WAVXDMGR.SYS


系统驱动项
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
360procmon = C:\PROGRAM FILES\360SAFE\SAFEMON\360PROCMON.SYS
abp480n5 = C:\WINDOWS\SYSTEM32\DRIVERS\ABP480N5.SYS
ACPI = C:\WINDOWS\SYSTEM32\DRIVERS\ACPI.SYS
adpu160m = C:\WINDOWS\SYSTEM32\DRIVERS\ADPU160M.SYS
aec = C:\WINDOWS\SYSTEM32\DRIVERS\AEC.SYS
AegisP = C:\WINDOWS\SYSTEM32\DRIVERS\AEGISP.SYS
AFD = C:\WINDOWS\SYSTEM32\DRIVERS\AFD.SYS
agp440 = C:\WINDOWS\SYSTEM32\DRIVERS\AGP440.SYS
agpCPQ = C:\WINDOWS\SYSTEM32\DRIVERS\AGPCPQ.SYS
Aha154x = C:\WINDOWS\SYSTEM32\DRIVERS\AHA154X.SYS
aic78u2 = C:\WINDOWS\SYSTEM32\DRIVERS\AIC78U2.SYS
aic78xx = C:\WINDOWS\SYSTEM32\DRIVERS\AIC78XX.SYS
AliIde = C:\WINDOWS\SYSTEM32\DRIVERS\ALIIDE.SYS
alim1541 = C:\WINDOWS\SYSTEM32\DRIVERS\ALIM1541.SYS
amdagp = C:\WINDOWS\SYSTEM32\DRIVERS\AMDAGP.SYS
amsint = C:\WINDOWS\SYSTEM32\DRIVERS\AMSINT.SYS
Apaidi = C:\WINDOWS\SYSTEM32\DRIVERS\APAIDI.SYS
ApfiltrService = C:\WINDOWS\SYSTEM32\DRIVERS\APFILTR.SYS
Arp1394 = C:\WINDOWS\SYSTEM32\DRIVERS\ARP1394.SYS
asc = C:\WINDOWS\SYSTEM32\DRIVERS\ASC.SYS
asc3350p = C:\WINDOWS\SYSTEM32\DRIVERS\ASC3350P.SYS
asc3550 = C:\WINDOWS\SYSTEM32\DRIVERS\ASC3550.SYS
AsfAlrt = C:\WINDOWS\SYSTEM32\DRIVERS\ASFALRT.SYS
AsyncMac = C:\WINDOWS\SYSTEM32\DRIVERS\ASYNCMAC.SYS
atapi = C:\WINDOWS\SYSTEM32\DRIVERS\ATAPI.SYS
Atmarpc = C:\WINDOWS\SYSTEM32\DRIVERS\ATMARPC.SYS
audstub = C:\WINDOWS\SYSTEM32\DRIVERS\AUDSTUB.SYS
BthEnum = C:\WINDOWS\SYSTEM32\DRIVERS\BTHENUM.SYS
BthPan = C:\WINDOWS\SYSTEM32\DRIVERS\BTHPAN.SYS
BTHPORT = C:\WINDOWS\SYSTEM32\DRIVERS\BTHPORT.SYS
BTHUSB = C:\WINDOWS\SYSTEM32\DRIVERS\BTHUSB.SYS
cbidf = C:\WINDOWS\SYSTEM32\DRIVERS\CBIDF2K.SYS
CCDECODE = C:\WINDOWS\SYSTEM32\DRIVERS\CCDECODE.SYS
cd20xrnt = C:\WINDOWS\SYSTEM32\DRIVERS\CD20XRNT.SYS
CdaC15BA = C:\WINDOWS\SYSTEM32\DRIVERS\CDAC15BA.SYS
Cdrom = C:\WINDOWS\SYSTEM32\DRIVERS\CDROM.SYS
CmBatt = C:\WINDOWS\SYSTEM32\DRIVERS\CMBATT.SYS
CmdIde = C:\WINDOWS\SYSTEM32\DRIVERS\CMDIDE.SYS
Compbatt = C:\WINDOWS\SYSTEM32\DRIVERS\COMPBATT.SYS
Cpqarray = C:\WINDOWS\SYSTEM32\DRIVERS\CPQARRAY.SYS
dac2w2k = C:\WINDOWS\SYSTEM32\DRIVERS\DAC2W2K.SYS
dac960nt = C:\WINDOWS\SYSTEM32\DRIVERS\DAC960NT.SYS
Disk = C:\WINDOWS\SYSTEM32\DRIVERS\DISK.SYS
dmboot = C:\WINDOWS\SYSTEM32\DRIVERS\DMBOOT.SYS
dmio = C:\WINDOWS\SYSTEM32\DRIVERS\DMIO.SYS
dmload = C:\WINDOWS\SYSTEM32\DRIVERS\DMLOAD.SYS
DMusic = C:\WINDOWS\SYSTEM32\DRIVERS\DMUSIC.SYS
dpti2o = C:\WINDOWS\SYSTEM32\DRIVERS\DPTI2O.SYS
drmkaud = C:\WINDOWS\SYSTEM32\DRIVERS\DRMKAUD.SYS
DXEC01 = C:\WINDOWS\SYSTEM32\DRIVERS\DXEC01.SYS
E100B = C:\WINDOWS\SYSTEM32\DRIVERS\E100B325.SYS
e1express = C:\WINDOWS\SYSTEM32\DRIVERS\E1E5132.SYS
eeCtrl = C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\EENGINE\EECTRL.SYS
EraserUtilRebootDrv = C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\EENGINE\ERASERUTILREBOOTDRV.SYS
Fdc = C:\WINDOWS\SYSTEM32\DRIVERS\FDC.SYS
Flpydisk = C:\WINDOWS\SYSTEM32\DRIVERS\FLPYDISK.SYS
FsVga = C:\WINDOWS\SYSTEM32\DRIVERS\FSVGA.SYS
Ftdisk = C:\WINDOWS\SYSTEM32\DRIVERS\FTDISK.SYS
Gpc = C:\WINDOWS\SYSTEM32\DRIVERS\MSGPC.SYS
guardian2 = C:\WINDOWS\SYSTEM32\DRIVERS\OZ776.SYS
HDAudBus = C:\WINDOWS\SYSTEM32\DRIVERS\HDAUDBUS.SYS
HECI = C:\WINDOWS\SYSTEM32\DRIVERS\HECI.SYS
HidUsb = C:\WINDOWS\SYSTEM32\DRIVERS\HIDUSB.SYS
hpn = C:\WINDOWS\SYSTEM32\DRIVERS\HPN.SYS
HSFHWAZL = C:\WINDOWS\SYSTEM32\DRIVERS\HSFHWAZL.SYS
HSF_DPV = C:\WINDOWS\SYSTEM32\DRIVERS\HSF_DPV.SYS
HTTP = C:\WINDOWS\SYSTEM32\DRIVERS\HTTP.SYS
i2omp = C:\WINDOWS\SYSTEM32\DRIVERS\I2OMP.SYS
i8042prt = C:\WINDOWS\SYSTEM32\DRIVERS\I8042PRT.SYS
Imapi = C:\WINDOWS\SYSTEM32\DRIVERS\IMAPI.SYS
ini910u = C:\WINDOWS\SYSTEM32\DRIVERS\INI910U.SYS
IntelIde = C:\WINDOWS\SYSTEM32\DRIVERS\INTELIDE.SYS
intelppm = C:\WINDOWS\SYSTEM32\DRIVERS\INTELPPM.SYS
Ip6Fw = C:\WINDOWS\SYSTEM32\DRIVERS\IP6FW.SYS
IpFilterDriver = C:\WINDOWS\SYSTEM32\DRIVERS\IPFLTDRV.SYS
IpInIp = C:\WINDOWS\SYSTEM32\DRIVERS\IPINIP.SYS
IpNat = C:\WINDOWS\SYSTEM32\DRIVERS\IPNAT.SYS
IPSec = C:\WINDOWS\SYSTEM32\DRIVERS\IPSEC.SYS
IRENUM = C:\WINDOWS\SYSTEM32\DRIVERS\IRENUM.SYS
isapnp = C:\WINDOWS\SYSTEM32\DRIVERS\ISAPNP.SYS
Kbdclass = C:\WINDOWS\SYSTEM32\DRIVERS\KBDCLASS.SYS
kmixer = C:\WINDOWS\SYSTEM32\DRIVERS\KMIXER.SYS
LVcKap = C:\WINDOWS\SYSTEM32\DRIVERS\LVCKAP.SYS
LVMVDrv = C:\WINDOWS\SYSTEM32\DRIVERS\LVMVDRV.SYS
LVPr2Mon = C:\WINDOWS\SYSTEM32\DRIVERS\LVPR2MON.SYS
LVUSBSta = C:\WINDOWS\SYSTEM32\DRIVERS\LVUSBSTA.SYS
LVUVC = C:\WINDOWS\SYSTEM32\DRIVERS\LVUVC.SYS
mdmxsdk = C:\WINDOWS\SYSTEM32\DRIVERS\MDMXSDK.SYS
Mouclass = C:\WINDOWS\SYSTEM32\DRIVERS\MOUCLASS.SYS
mouhid = C:\WINDOWS\SYSTEM32\DRIVERS\MOUHID.SYS
mraid35x = C:\WINDOWS\SYSTEM32\DRIVERS\MRAID35X.SYS
MSKSSRV = C:\WINDOWS\SYSTEM32\DRIVERS\MSKSSRV.SYS
MSPCLOCK = C:\WINDOWS\SYSTEM32\DRIVERS\MSPCLOCK.SYS
MSPQM = C:\WINDOWS\SYSTEM32\DRIVERS\MSPQM.SYS
mssmbios = C:\WINDOWS\SYSTEM32\DRIVERS\MSSMBIOS.SYS
MSTEE = C:\WINDOWS\SYSTEM32\DRIVERS\MSTEE.SYS
NABTSFEC = C:\WINDOWS\SYSTEM32\DRIVERS\NABTSFEC.SYS
NAVENG = C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20090311.003\NAVENG.SYS
NAVEX15 = C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20090311.003\NAVEX15.SYS
NdisIP = C:\WINDOWS\SYSTEM32\DRIVERS\NDISIP.SYS
NdisTapi = C:\WINDOWS\SYSTEM32\DRIVERS\NDISTAPI.SYS
Ndisuio = C:\WINDOWS\SYSTEM32\DRIVERS\NDISUIO.SYS
NdisWan = C:\WINDOWS\SYSTEM32\DRIVERS\NDISWAN.SYS
NetBT = C:\WINDOWS\SYSTEM32\DRIVERS\NETBT.SYS
NETw4x32 = C:\WINDOWS\SYSTEM32\DRIVERS\NETW4X32.SYS
NIC1394 = C:\WINDOWS\SYSTEM32\DRIVERS\NIC1394.SYS
nv = C:\WINDOWS\SYSTEM32\DRIVERS\NV4_MINI.SYS
NwlnkFlt = C:\WINDOWS\SYSTEM32\DRIVERS\NWLNKFLT.SYS
NwlnkFwd = C:\WINDOWS\SYSTEM32\DRIVERS\NWLNKFWD.SYS
ohci1394 = C:\WINDOWS\SYSTEM32\DRIVERS\OHCI1394.SYS
Parport = C:\WINDOWS\SYSTEM32\DRIVERS\PARPORT.SYS
PBADRV = C:\WINDOWS\SYSTEM32\DRIVERS\PBADRV.SYS
PCI = C:\WINDOWS\SYSTEM32\DRIVERS\PCI.SYS
PCIIde = C:\WINDOWS\SYSTEM32\DRIVERS\PCIIDE.SYS
Pcmcia = C:\WINDOWS\SYSTEM32\DRIVERS\PCMCIA.SYS
perc2 = C:\WINDOWS\SYSTEM32\DRIVERS\PERC2.SYS
perc2hib = C:\WINDOWS\SYSTEM32\DRIVERS\PERC2HIB.SYS
pfc = C:\WINDOWS\SYSTEM32\DRIVERS\PFC.SYS
PptpMiniport = C:\WINDOWS\SYSTEM32\DRIVERS\RASPPTP.SYS
PSched = C:\WINDOWS\SYSTEM32\DRIVERS\PSCHED.SYS
Ptilink = C:\WINDOWS\SYSTEM32\DRIVERS\PTILINK.SYS
ql1080 = C:\WINDOWS\SYSTEM32\DRIVERS\QL1080.SYS
Ql10wnt = C:\WINDOWS\SYSTEM32\DRIVERS\QL10WNT.SYS
ql12160 = C:\WINDOWS\SYSTEM32\DRIVERS\QL12160.SYS
ql1240 = C:\WINDOWS\SYSTEM32\DRIVERS\QL1240.SYS
ql1280 = C:\WINDOWS\SYSTEM32\DRIVERS\QL1280.SYS
RasAcd = C:\WINDOWS\SYSTEM32\DRIVERS\RASACD.SYS
Rasl2tp = C:\WINDOWS\SYSTEM32\DRIVERS\RASL2TP.SYS
RasPppoe = C:\WINDOWS\SYSTEM32\DRIVERS\RASPPPOE.SYS
Raspti = C:\WINDOWS\SYSTEM32\DRIVERS\RASPTI.SYS
RDPCDD = C:\WINDOWS\SYSTEM32\DRIVERS\RDPCDD.SYS
rdpdr = C:\WINDOWS\SYSTEM32\DRIVERS\RDPDR.SYS
redbook = C:\WINDOWS\SYSTEM32\DRIVERS\REDBOOK.SYS
RFCOMM = C:\WINDOWS\SYSTEM32\DRIVERS\RFCOMM.SYS
s24trans = C:\WINDOWS\SYSTEM32\DRIVERS\S24TRANS.SYS
SafeBoxKrnl = C:\WINDOWS\SYSTEM32\DRIVERS\SAFEBOXKRNL.SYS
SAVRT = C:\PROGRAM FILES\SYMANTEC ANTIVIRUS\SAVRT.SYS
SAVRTPEL = C:\PROGRAM FILES\SYMANTEC ANTIVIRUS\SAVRTPEL.SYS
ScsiPort = C:\WINDOWS\SYSTEM32\DRIVERS\SCSIPORT.SYS
Secdrv = C:\WINDOWS\SYSTEM32\DRIVERS\SECDRV.SYS
serenum = C:\WINDOWS\SYSTEM32\DRIVERS\SERENUM.SYS
Serial = C:\WINDOWS\SYSTEM32\DRIVERS\SERIAL.SYS
sisagp = C:\WINDOWS\SYSTEM32\DRIVERS\SISAGP.SYS
SLIP = C:\WINDOWS\SYSTEM32\DRIVERS\SLIP.SYS
Sparrow = C:\WINDOWS\SYSTEM32\DRIVERS\SPARROW.SYS
SPBBCDrv = C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SPBBC\SPBBCDRV.SYS
splitter = C:\WINDOWS\SYSTEM32\DRIVERS\SPLITTER.SYS
STHDA = C:\WINDOWS\SYSTEM32\DRIVERS\STHDA.SYS
streamip = C:\WINDOWS\SYSTEM32\DRIVERS\STREAMIP.SYS
swenum = C:\WINDOWS\SYSTEM32\DRIVERS\SWENUM.SYS
swmidi = C:\WINDOWS\SYSTEM32\DRIVERS\SWMIDI.SYS
symc810 = C:\WINDOWS\SYSTEM32\DRIVERS\SYMC810.SYS
symc8xx = C:\WINDOWS\SYSTEM32\DRIVERS\SYMC8XX.SYS
SymEvent = C:\PROGRAM FILES\SYMANTEC\SYMEVENT.SYS
SYMREDRV = C:\WINDOWS\SYSTEM32\DRIVERS\SYMREDRV.SYS
SYMTDI = C:\WINDOWS\SYSTEM32\DRIVERS\SYMTDI.SYS
sym_hi = C:\WINDOWS\SYSTEM32\DRIVERS\SYM_HI.SYS
sym_u3 = C:\WINDOWS\SYSTEM32\DRIVERS\SYM_U3.SYS
sysaudio = C:\WINDOWS\SYSTEM32\DRIVERS\SYSAUDIO.SYS
Tcpip = C:\WINDOWS\SYSTEM32\DRIVERS\TCPIP.SYS
TermDD = C:\WINDOWS\SYSTEM32\DRIVERS\TERMDD.SYS
TosIde = C:\WINDOWS\SYSTEM32\DRIVERS\TOSIDE.SYS
TSKSP = D:\PROGRAM FILES\QQDOCTOR\TSKSP.SYS
ultra = C:\WINDOWS\SYSTEM32\DRIVERS\ULTRA.SYS
Update = C:\WINDOWS\SYSTEM32\DRIVERS\UPDATE.SYS
usbaudio = C:\WINDOWS\SYSTEM32\DRIVERS\USBAUDIO.SYS
usbccgp = C:\WINDOWS\SYSTEM32\DRIVERS\USBCCGP.SYS
usbehci = C:\WINDOWS\SYSTEM32\DRIVERS\USBEHCI.SYS
usbhub = C:\WINDOWS\SYSTEM32\DRIVERS\USBHUB.SYS
usbprint = C:\WINDOWS\SYSTEM32\DRIVERS\USBPRINT.SYS
USBSTOR = C:\WINDOWS\SYSTEM32\DRIVERS\USBSTOR.SYS
usbuhci = C:\WINDOWS\SYSTEM32\DRIVERS\USBUHCI.SYS
VgaSave = C:\WINDOWS\SYSTEM32\DRIVERS\VGA.SYS
viaagp = C:\WINDOWS\SYSTEM32\DRIVERS\VIAAGP.SYS
ViaIde = C:\WINDOWS\SYSTEM32\DRIVERS\VIAIDE.SYS
Wanarp = C:\WINDOWS\SYSTEM32\DRIVERS\WANARP.SYS
WaveFDE = C:\WINDOWS\SYSTEM32\DRIVERS\WAVEFDE.SYS
Wdf01000 = C:\WINDOWS\SYSTEM32\DRIVERS\WDF01000.SYS
wdmaud = C:\WINDOWS\SYSTEM32\DRIVERS\WDMAUD.SYS
winachsf = C:\WINDOWS\SYSTEM32\DRIVERS\HSF_CNXT.SYS
WmiAcpi = C:\WINDOWS\SYSTEM32\DRIVERS\WMIACPI.SYS
WSTCODEC = C:\WINDOWS\SYSTEM32\DRIVERS\WSTCODEC.SYS
WudfPf = C:\WINDOWS\SYSTEM32\DRIVERS\WUDFPF.SYS
WudfRd = C:\WINDOWS\SYSTEM32\DRIVERS\WUDFRD.SYS