操作                                                            时间                                                            进程名称                                                        数值名称                                                        旧值                                                            新值                                                            
创建                                                            2009-03-18 20:51:05                                             C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMP\IGS12.TMP                    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{77FEF28E-EB96-44FF-B511-3185DEA48697}\                                                                                                                                
创建                                                            2009-03-18 20:47:56                                             C:\WINDOWS\SYSTEM32\SERVICES.EXE                                HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WOPTIHWDETECT\                                                                                                                                
修改                                                            2009-03-18 20:32:54                                             C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMP\IGS8.TMP                     HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH\SEARCHASSISTANThttp://www.baidu.com/baidu?tn=youcome_pg                        http://bar.baidu.com/sobar/defaultsearch.html                   
修改                                                            2009-03-18 20:32:40                                             C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMP\IGS8.TMP                     HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH\CUSTOMIZESEARCHhttp://www.baidu.com/baidu?tn=youcome_pg                        http://bar.baidu.com/sobar/defaultsearch.html                   
创建                                                            2009-03-18 20:32:36                                             C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMP\IGS8.TMP                     HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{77FEF28E-EB96-44FF-B511-3185DEA48697}\