HKLM\System\CurrentControlSet\Control\Terminal Server\Wds\rdpwd\StartupPrograms			
+ rdpclip	RDP Clip Monitor	Microsoft Corporation	c:\windows\system32\rdpclip.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit			
+ C:\WINDOWS\system32\userinit.exe	Userinit Logon Application	Microsoft Corporation	c:\windows\system32\userinit.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell			
+ Explorer.exe	Windows Explorer	Microsoft Corporation	c:\windows\explorer.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run			
+ 360Safetray	360ȫʿʵʱģ	360ȫ	d:\program files\360\360safe\safemon\360tray.exe
+ EnergyCut	Lenovo Power Management Software	Lenovo (Beijing) Limited	c:\program files\lenovo\energycut\energycut.exe
+ EnergyUtility	Lenovo Power Management	Lenovo(Beijing)Limited	c:\program files\lenovo\energycut\utilty.exe
+ IgfxTray	igfxTray Module	Intel Corporation	c:\windows\system32\igfxtray.exe
+ NvCplDaemon	NVIDIA Display Properties Extension	NVIDIA Corporation	c:\windows\system32\nvcpl.dll
+ NvMediaCenter	NVIDIA Media Center Library	NVIDIA Corporation	c:\windows\system32\nvmctray.dll
+ nwiz	NVIDIA nView Wizard, Version 110.94 	NVIDIA Corporation	c:\windows\system32\nwiz.exe
+ PSQLLauncher			c:\program files\lenovosecuritysolution fp\launcher.exe
+ RavTray	Rising tray framework	Beijing Rising Information Technology Co., Ltd.	d:\program files\rising\rav\rstray.exe
+ RFWTray	Rising tray framework	Beijing Rising Information Technology Co., Ltd.	d:\program files\rising\rfw\rstray.exe
+ RTHDCPL	Realtek HD Audio Control Panel	Realtek Semiconductor Corp.	c:\windows\rthdcpl.exe
+ TpShocks	ThinkVantage Active Protection System	Lenovo.	c:\windows\system32\tpshocks.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run			
+ ctfmon.exe	CTF Loader	Microsoft Corporation	c:\windows\system32\ctfmon.exe
HKLM\SOFTWARE\Classes\Protocols\Filter			
+ application/octet-stream	Microsoft .NET Runtime Execution Engine	Microsoft Corporation	c:\windows\system32\mscoree.dll
+ application/x-complus	Microsoft .NET Runtime Execution Engine	Microsoft Corporation	c:\windows\system32\mscoree.dll
+ application/x-msdownload	Microsoft .NET Runtime Execution Engine	Microsoft Corporation	c:\windows\system32\mscoree.dll
+ Class Install Handler	OLE32 Extensions for Win32	Microsoft Corporation	c:\windows\system32\urlmon.dll
+ deflate	OLE32 Extensions for Win32	Microsoft Corporation	c:\windows\system32\urlmon.dll
+ gzip	OLE32 Extensions for Win32	Microsoft Corporation	c:\windows\system32\urlmon.dll
+ lzdhtml	OLE32 Extensions for Win32	Microsoft Corporation	c:\windows\system32\urlmon.dll
+ text/webviewhtml	Windows Shell Common Dll	Microsoft Corporation	c:\windows\system32\shell32.dll
+ text/xml	Microsoft Office XML MIME Filter	Microsoft Corporation	c:\program files\common files\microsoft shared\office12\msoxmlmf.dll
HKLM\SOFTWARE\Classes\Protocols\Handler			
+ about	Microsoft (R) HTML Viewer	Microsoft Corporation	c:\windows\system32\mshtml.dll
+ cdl	OLE32 Extensions for Win32	Microsoft Corporation	c:\windows\system32\urlmon.dll
+ dvd	ActiveX control for streaming video	Microsoft Corporation	c:\windows\system32\msvidctl.dll
+ file	OLE32 Extensions for Win32	Microsoft Corporation	c:\windows\system32\urlmon.dll
+ ftp	OLE32 Extensions for Win32	Microsoft Corporation	c:\windows\system32\urlmon.dll
+ gopher	OLE32 Extensions for Win32	Microsoft Corporation	c:\windows\system32\urlmon.dll
+ http	OLE32 Extensions for Win32	Microsoft Corporation	c:\windows\system32\urlmon.dll
+ https	OLE32 Extensions for Win32	Microsoft Corporation	c:\windows\system32\urlmon.dll
+ its	Microsoft? InfoTech Storage System Library	Microsoft Corporation	c:\windows\system32\itss.dll
+ javascript	Microsoft (R) HTML Viewer	Microsoft Corporation	c:\windows\system32\mshtml.dll
+ livecall	Windows Live Messenger Protocol Handler Module	Microsoft Corporation	c:\program files\windows live\messenger\msgrapp.14.0.8064.0206.dll
+ local	OLE32 Extensions for Win32	Microsoft Corporation	c:\windows\system32\urlmon.dll
+ mailto	Microsoft (R) HTML Viewer	Microsoft Corporation	c:\windows\system32\mshtml.dll
+ mhtml	Microsoft Internet Messaging API	Microsoft Corporation	c:\windows\system32\inetcomm.dll
+ mk	OLE32 Extensions for Win32	Microsoft Corporation	c:\windows\system32\urlmon.dll
+ ms-help	Microsoft? Help Data Services Module	Microsoft Corporation	c:\program files\common files\microsoft shared\help\hxds.dll
+ ms-its	Microsoft? InfoTech Storage System Library	Microsoft Corporation	c:\windows\system32\itss.dll
+ ms-itss	Microsoft? InfoTech Storage System Library	Microsoft Corporation	c:\program files\common files\microsoft shared\information retrieval\msitss.dll
+ msnim	Windows Live Messenger Protocol Handler Module	Microsoft Corporation	c:\program files\windows live\messenger\msgrapp.14.0.8064.0206.dll
+ mso-offdap11	Microsoft Office Web Components 2003	Microsoft Corporation	c:\program files\common files\microsoft shared\web components\11\owc11.dll
+ res	Microsoft (R) HTML Viewer	Microsoft Corporation	c:\windows\system32\mshtml.dll
+ saphtmlp	SAP HTML Pluggable Protocol	SAP AG, Walldorf	d:\program files\sapgui\sapgui\saphtmlp.dll
+ sapr3	SAP HTML Pluggable Protocol	SAP AG, Walldorf	d:\program files\sapgui\sapgui\saphtmlp.dll
+ sysimage	Microsoft (R) HTML Viewer	Microsoft Corporation	c:\windows\system32\mshtml.dll
+ tv	ActiveX control for streaming video	Microsoft Corporation	c:\windows\system32\msvidctl.dll
+ vbscript	Microsoft (R) HTML Viewer	Microsoft Corporation	c:\windows\system32\mshtml.dll
+ wia	WIA Scripting Layer	Microsoft Corporation	c:\windows\system32\wiascr.dll
HKCU\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components			
+ 0			ûзļ:   file:///C:/DOCUME~1/ADMINI~1/LOCALS~1/Temp/msohtml1/01/clip_image001.jpg
+ 1			ûзļ:   About:Home
HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components			
+ Browser Customizations	IEAK branding	Microsoft Corporation	c:\windows\system32\iedkcs32.dll
+ Internet Explorer	IE Per-User Initialization Utility	Microsoft Corporation	c:\windows\system32\ie4uinit.exe
+ Internet Explorer	IE Per-User Initialization Utility	Microsoft Corporation	c:\windows\system32\ie4uinit.exe
+ Internet Explorer 汾	IE Per User Active Setup Uninstall Utility	Microsoft Corporation	c:\windows\system32\ieudinit.exe
+ Microsoft Outlook Express 6	Outlook Express Setup Library	Microsoft Corporation	c:\program files\outlook express\setup50.exe
+ Microsoft Windows Media Player	ADVPACK	Microsoft Corporation	c:\windows\system32\advpack.dll
+ n/a	Microsoft .NET IE SECURITY REGISTRATION	Microsoft Corporation	c:\windows\system32\mscories.dll
+ NetMeeting 3.01	ADVPACK	Microsoft Corporation	c:\windows\system32\advpack.dll
+ Outlook Express	Windows NT User Data Migration Tool	Microsoft Corporation	c:\windows\system32\shmgrate.exe
+ Themes Setup	Microsoft(C) Register Server	Microsoft Corporation	c:\windows\system32\regsvr32.exe
+ Windows Media Player	Microsoft Windows Media Player װʵó	Microsoft Corporation	c:\windows\inf\unregmp2.exe
+ Windows Messenger 4.7	ADVPACK	Microsoft Corporation	c:\windows\system32\advpack.dll
+ Windows 	Microsoft(C) Register Server	Microsoft Corporation	c:\windows\system32\regsvr32.exe
+ ͨѶ 6	Outlook Express Setup Library	Microsoft Corporation	c:\program files\outlook express\setup50.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler			
+ Browseui Ԥس	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ 𻺴	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad			
+ CDBurn	Windows Shell Common Dll	Microsoft Corporation	c:\windows\system32\shell32.dll
+ PostBootReminder	Windows Shell Common Dll	Microsoft Corporation	c:\windows\system32\shell32.dll
+ SysTray	Systray shell service object	Microsoft Corporation	c:\windows\system32\stobject.dll
+ UPnPMonitor	UPNP Tray Monitor and Folder	Microsoft Corporation	c:\windows\system32\upnpui.dll
+ WebCheck	Web Site Monitor	Microsoft Corporation	c:\windows\system32\webcheck.dll
+ WPDShServiceObj	Windows Portable Device Shell Service Object	Microsoft Corporation	c:\windows\system32\wpdshserviceobj.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks			
+ Rising Execute File Exts hook	Rising Shell Ext Module	Beijing Rising Information Technology Co., Ltd.	c:\windows\system32\ravext.dll
+ URL ִйҹ	Windows Shell Common Dll	Microsoft Corporation	c:\windows\system32\shell32.dll
HKCU\Software\Classes\*\ShellEx\ContextMenuHandlers			
+ UltraEdit	Shell Extension DLL		d:\program files\ultraedit-32\ue32ctmn.dll
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers			
+ 7-Zip	7-Zip Shell Extension	Igor Pavlov	d:\program files\7-zip\7-zip.dll
+ EncryptFile	Wopti ļҼģ	Wopti	d:\program files\wopti\woptiencryptmodule.dll
+ Offline Files	Client Side Caching UI	Microsoft Corporation	c:\windows\system32\cscui.dll
+ Open With	Windows Shell Common Dll	Microsoft Corporation	c:\windows\system32\shell32.dll
+ Open With EncryptionMenu	Windows Shell Common Dll	Microsoft Corporation	c:\windows\system32\shell32.dll
+ RisingRavExt	Rising Shell Ext Module	Beijing Rising Information Technology Co., Ltd.	c:\windows\system32\ravext.dll
+ SD360	360ɱҼɨ	360ȫ	d:\program files\360\360sd\menuex.dll
+ TcmShlExt			ûзļ:   C:\WINDOWS\system32\TCMMEN~1.DLL
+ TeraCopy			d:\program files\teracopy\teracopyext.dll
+ UltraEdit-32	Shell Extension DLL		d:\program files\ultraedit-32\ue32ctmn.dll
+ WinRAR			c:\program files\winrar\rarext.dll
+ ʼ˵	Windows Shell Common Dll	Microsoft Corporation	c:\windows\system32\shell32.dll
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers			
+ SafearchiveContextMenu			c:\program files\lenovosecuritysolution fp\farchns.dll
+ Send To	Windows Shell Common Dll	Microsoft Corporation	c:\windows\system32\shell32.dll
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers			
+ RisingRavExt	Rising Shell Ext Module	Beijing Rising Information Technology Co., Ltd.	c:\windows\system32\ravext.dll
+ SD360	360ɱҼɨ	360ȫ	d:\program files\360\360sd\menuex.dll
+ TcmShlExt			ûзļ:   C:\WINDOWS\system32\TCMMEN~1.DLL
+ TeraCopy			d:\program files\teracopy\teracopyext.dll
+ UltraISO	ISOShell	EZB Systems, Inc.	d:\program files\ultraiso\isoshell.dll
+ WinRAR			c:\program files\winrar\rarext.dll
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers			
+ 7-Zip	7-Zip Shell Extension	Igor Pavlov	d:\program files\7-zip\7-zip.dll
+ EncryptionMenu	Windows Shell Common Dll	Microsoft Corporation	c:\windows\system32\shell32.dll
+ Offline Files	Client Side Caching UI	Microsoft Corporation	c:\windows\system32\cscui.dll
+ RisingRavExt	Rising Shell Ext Module	Beijing Rising Information Technology Co., Ltd.	c:\windows\system32\ravext.dll
+ SD360	360ɱҼɨ	360ȫ	d:\program files\360\360sd\menuex.dll
+ Sharing	Shell extensions for sharing	Microsoft Corporation	c:\windows\system32\ntshrui.dll
+ TeraCopy			d:\program files\teracopy\teracopyext.dll
+ UltraISO	ISOShell	EZB Systems, Inc.	d:\program files\ultraiso\isoshell.dll
+ WinRAR			c:\program files\winrar\rarext.dll
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers			
+ 00nView	NVIDIA Desktop Explorer, Version 110.94 	NVIDIA Corporation	c:\windows\system32\nvshell.dll
+ igfxcui	igfxpph Module	Intel Corporation	c:\windows\system32\igfxpph.dll
+ New	Windows Shell Common Dll	Microsoft Corporation	c:\windows\system32\shell32.dll
+ NvCplDesktopContext	NVIDIA Display Properties Extension	NVIDIA Corporation	c:\windows\system32\nvcpl.dll
+ TeraCopy			d:\program files\teracopy\teracopyext.dll
HKLM\Software\Classes\Folder\Shellex\ColumnHandlers			
+ PDF Shell Extension	PDF Shell Extension	Adobe Systems, Inc.	c:\program files\common files\adobe\acrobat\activex\pdfshell.dll
+ {0D2E74C4-3C34-11d2-A27E-00C04FC30871}	Windows Shell Common Dll	Microsoft Corporation	c:\windows\system32\shell32.dll
+ {24F14F01-7B1C-11d1-838f-0000F80461CF}	Windows Shell Common Dll	Microsoft Corporation	c:\windows\system32\shell32.dll
+ {24F14F02-7B1C-11d1-838f-0000F80461CF}	Windows Shell Common Dll	Microsoft Corporation	c:\windows\system32\shell32.dll
+ {66742402-F9B9-11D1-A202-0000F81FEDEE}	Windows Shell Common Dll	Microsoft Corporation	c:\windows\system32\shell32.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers			
+ Offline Files	Client Side Caching UI	Microsoft Corporation	c:\windows\system32\cscui.dll
+ TcmShlExt			ûзļ:   C:\WINDOWS\system32\TCMMEN~1.DLL
+ UEAFOverlay			c:\program files\lenovosecuritysolution fp\farchns.dll
+ UEAFOverlayOpen			c:\program files\lenovosecuritysolution fp\farchns.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved			
+ %DESC_PublishDropTarget%	Photo Printing Wizard	Microsoft Corporation	c:\windows\system32\photowiz.dll
+ &Links	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ .CAB file viewer	Cabinet File Viewer Shell Extension	Microsoft Corporation	c:\windows\system32\cabview.dll
+ 7-Zip Shell Extension	7-Zip Shell Extension	Igor Pavlov	d:\program files\7-zip\7-zip.dll
+ ActiveX Cache Folder	Object Control Viewer	Microsoft Corporation	c:\windows\system32\occache.dll
+ Audio Media Properties Handler	Media File Property Extractor Shell Extension	Microsoft Corporation	c:\windows\system32\shmedia.dll
+ Auto Update Property Sheet Extension	Automatic Updates Control Panel	Microsoft Corporation	c:\windows\system32\wuaucpl.cpl
+ Avi Properties Handler	Media File Property Extractor Shell Extension	Microsoft Corporation	c:\windows\system32\shmedia.dll
+ BandProxy	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ CDF Extension Copy Hook	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ Code Download Agent	Web Site Monitor	Microsoft Corporation	c:\windows\system32\webcheck.dll
+ Compatibility Page	Compatibility Tab Shell Extension DLL	Microsoft Corporation	c:\windows\system32\slayerxp.dll
+ Compressed (zipped) Folder Right Drag Handler	Compressed (zipped) Folders	Microsoft Corporation	c:\windows\system32\zipfldr.dll
+ Compressed (zipped) Folder SendTo Target	Compressed (zipped) Folders	Microsoft Corporation	c:\windows\system32\zipfldr.dll
+ ConnectionAgent	Web Site Monitor	Microsoft Corporation	c:\windows\system32\webcheck.dll
+ Crypto PKO Extension	Crypto Shell Extensions	Microsoft Corporation	c:\windows\system32\cryptext.dll
+ Crypto Sign Extension	Crypto Shell Extensions	Microsoft Corporation	c:\windows\system32\cryptext.dll
+ Darwin App Publisher	Shell Application Manager	Microsoft Corporation	c:\windows\system32\appwiz.cpl
+ Desktop Explorer	NVIDIA Desktop Explorer, Version 110.94 	NVIDIA Corporation	c:\windows\system32\nvshell.dll
+ Desktop Explorer Menu	NVIDIA Desktop Explorer, Version 110.94 	NVIDIA Corporation	c:\windows\system32\nvshell.dll
+ DfsShell	Distributed File System shell extension	Microsoft Corporation	c:\windows\system32\dfsshlex.dll
+ Directory Context Menu Verbs	Directory Service Common UI	Microsoft Corporation	c:\windows\system32\dsuiext.dll
+ Directory Object Find	Directory Service Find	Microsoft Corporation	c:\windows\system32\dsquery.dll
+ Directory Property UI	Directory Service Common UI	Microsoft Corporation	c:\windows\system32\dsuiext.dll
+ Directory Query UI	Directory Service Find	Microsoft Corporation	c:\windows\system32\dsquery.dll
+ Directory Start/Search Find	Directory Service Find	Microsoft Corporation	c:\windows\system32\dsquery.dll
+ Disk Copy Extension	Windows DiskCopy	Microsoft Corporation	c:\windows\system32\diskcopy.dll
+ Disk Quota UI	Windows Shell Disk Quota UI DLL	Microsoft Corporation	c:\windows\system32\dskquoui.dll
+ Display Adapter CPL Extension	Advanced display adapter properties	Microsoft Corporation	c:\windows\system32\deskadp.dll
+ Display Monitor CPL Extension	Advanced display monitor properties	Microsoft Corporation	c:\windows\system32\deskmon.dll
+ Display Panning CPL Extension			ûзļ:   deskpan.dll
+ Display TroubleShoot CPL Extension	Advanced display performance properties	Microsoft Corporation	c:\windows\system32\deskperf.dll
+ DMRC Shell Extension	Shell interface for DameWare Mini Remote Control Application	DameWare Development LLC	c:\windows\system32\dwrcsh32.dll
+ DS Security Page	Directory Service Security UI	Microsoft Corporation	c:\windows\system32\dssec.dll
+ EncryptFile	Wopti ļҼģ	Wopti	d:\program files\wopti\woptiencryptmodule.dll
+ Extensions Manager Folder	Extensions Manager	Microsoft Corporation	c:\windows\system32\extmgr.dll
+ Favorites Band	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ FTP Folders Webview	Microsoft Internet Explorer FTP Folder Shell Extension	Microsoft Corporation	c:\windows\system32\msieftp.dll
+ GDI+ ļͼѹ	Windows ͼƬʹ鿴	Microsoft Corporation	c:\windows\system32\shimgvw.dll
+ History	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ HTML Document	Microsoft (R) HTML Viewer	Microsoft Corporation	c:\windows\system32\mshtml.dll
+ HTML ͼĽѹ	Windows ͼƬʹ鿴	Microsoft Corporation	c:\windows\system32\shimgvw.dll
+ HyperTerminal Icon Ext	HyperTerminal Applet Library	Hilgraeve, Inc.	c:\windows\system32\hticons.dll
+ ICC ļ	Microsoft Color Matching System User Interface DLL	Microsoft Corporation	c:\windows\system32\icmui.dll
+ ICM ӡ	Microsoft Color Matching System User Interface DLL	Microsoft Corporation	c:\windows\system32\icmui.dll
+ ICM 	Microsoft Color Matching System User Interface DLL	Microsoft Corporation	c:\windows\system32\icmui.dll
+ ICM ɨǹ	Microsoft Color Matching System User Interface DLL	Microsoft Corporation	c:\windows\system32\icmui.dll
+ IE AutoComplete	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ IE BandProxy	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ IE Custom MRU AutoCompleted List	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ IE Fade Task	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ IE History and Feeds Shell Data Source for Windows Search	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ IE IShellFolderBand	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ IE Menu Band	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ IE Menu Desk Bar	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ IE Menu Site	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ IE Microsoft BrowserBand	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ IE Microsoft History AutoComplete List	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ IE Microsoft Multiple AutoComplete List Container	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ IE Microsoft Shell Folder AutoComplete List	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ IE MRU AutoComplete List	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ IE Navigation Bar	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ IE Registry Tree Options Utility	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ IE RSS Feeder Folder	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ IE Search Band	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ IE Shell Band Site Menu	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ IE Shell Rebar BandSite	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ IE Tracking Shell Menu	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ IE User Assist	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ IE4 ׼ʼĻ	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ Installed Apps Enumerator	Shell Application Manager	Microsoft Corporation	c:\windows\system32\appwiz.cpl
+ Internet	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ Internet Name Space	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ InternetShortcut	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ ISFBand OC	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ Microsoft Agent Character Property Sheet Handler	Microsoft Agent Property Sheet Handler	Microsoft Corporation	c:\windows\msagent\agentpsh.dll
+ Microsoft AutoComplete	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ Microsoft Browser Architecture	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ Microsoft Browser Architecture	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ Microsoft BrowserBand	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ Microsoft DocProp Inplace Calendar Control	Microsoft DocProp Shell Ext	Microsoft Corporation	c:\windows\system32\docprop2.dll
+ Microsoft DocProp Inplace Droplist Combo Control	Microsoft DocProp Shell Ext	Microsoft Corporation	c:\windows\system32\docprop2.dll
+ Microsoft DocProp Inplace Edit Box Control	Microsoft DocProp Shell Ext	Microsoft Corporation	c:\windows\system32\docprop2.dll
+ Microsoft DocProp Inplace ML Edit Box Control	Microsoft DocProp Shell Ext	Microsoft Corporation	c:\windows\system32\docprop2.dll
+ Microsoft DocProp Inplace Time Control	Microsoft DocProp Shell Ext	Microsoft Corporation	c:\windows\system32\docprop2.dll
+ Microsoft DocProp Shell Ext	Microsoft DocProp Shell Ext	Microsoft Corporation	c:\windows\system32\docprop2.dll
+ Microsoft Internet 	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ Microsoft Office HTML Icon Handler	2007 Microsoft Office component	Microsoft Corporation	d:\program files\microsoft office\office12\msohevi.dll
+ Microsoft Office Metadata Handler	Microsoft Office Shell Extension Handlers	Microsoft Corporation	c:\program files\common files\microsoft shared\office12\msoshext.dll
+ Microsoft Office Outlook Custom Icon Handler	Outlook Shell Hook for Start/Find	Microsoft Corporation	d:\program files\microsoft office\office12\olkfstub.dll
+ Microsoft Office Outlook Desktop Icon Handler	Microsoft Shell Extension Library	Microsoft Corporation	d:\program files\microsoft office\office12\mlshext.dll
+ Microsoft Office Thumbnail Handler	Microsoft Office Shell Extension Handlers	Microsoft Corporation	c:\program files\common files\microsoft shared\office12\msoshext.dll
+ Microsoft Url History Service	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ Microsoft Url Search Hook	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ Microsoft Web Browser	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ Microsoft Զб	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ Microsoft ʷԶб	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ Microsoft 	Microsoft Data Access - OLE DB Core Services	Microsoft Corporation	c:\program files\common files\system\ole db\oledb32.dll
+ Microsoft ļԶб	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ Microsoft.XPS.Shell.Metadata.1	Package Document Shell Extension Handler	Microsoft Corporation	c:\windows\system32\xpsshhdr.dll
+ Microsoft.XPS.Shell.Thumbnail.1	Package Document Shell Extension Handler	Microsoft Corporation	c:\windows\system32\xpsshhdr.dll
+ Midi Properties Handler	Media File Property Extractor Shell Extension	Microsoft Corporation	c:\windows\system32\shmedia.dll
+ MMC Icon Handler	MMC Shell Extension DLL	Microsoft Corporation	c:\windows\system32\mmcshext.dll
+ Monitor	BTNCopy Module	Broadcom Corporation.	c:\windows\system32\btncopy.dll
+ MRU Զб	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ MSHTML Document	Microsoft (R) HTML Viewer	Microsoft Corporation	c:\windows\system32\mshtml.dll
+ Multimedia File Property Sheet	Control Panel Drivers Applet	Microsoft Corporation	c:\windows\system32\mmsys.cpl
+ My Bluetooth Places	BTNeighborhood DLL	Broadcom Corporation.	c:\windows\system32\btneighborhood.dll
+ MyDocs Copy Hook	My Documents Folder UI	Microsoft Corporation	c:\windows\system32\mydocs.dll
+ MyDocs Drop Target	My Documents Folder UI	Microsoft Corporation	c:\windows\system32\mydocs.dll
+ MyDocs Properties	My Documents Folder UI	Microsoft Corporation	c:\windows\system32\mydocs.dll
+ Nameext	2007 Microsoft Office component	Microsoft Corporation	c:\program files\microsoft office\office12\nameext.dll
+ NTFS Security Page	Security Shell Extension	Microsoft Corporation	c:\windows\system32\rshx32.dll
+ NvCpl DesktopContext Class	NVIDIA Display Properties Extension	NVIDIA Corporation	c:\windows\system32\nvcpl.dll
+ nView Desktop Context Menu	NVIDIA Desktop Explorer, Version 110.94 	NVIDIA Corporation	c:\windows\system32\nvshell.dll
+ Offline Files Folder Options	Client Side Caching UI	Microsoft Corporation	c:\windows\system32\cscui.dll
+ Offline Files Menu	Client Side Caching UI	Microsoft Corporation	c:\windows\system32\cscui.dll
+ OLE Docfile Property Page	OLE DocFile Property Page	Microsoft Corporation	c:\windows\system32\docprop.dll
+ Play on my TV helper	NVIDIA Display Properties Extension	NVIDIA Corporation	c:\windows\system32\nvcpl.dll
+ PlusPack CPL Extension	Windows Theme API	Microsoft Corporation	c:\windows\system32\themeui.dll
+ Portable Devices	Portable Devices Shell Extension	Microsoft Corporation	c:\windows\system32\wpdshext.dll
+ Portable Devices Menu	Portable Devices Shell Extension	Microsoft Corporation	c:\windows\system32\wpdshext.dll
+ Portable Media Devices	Portable Media Devices Shell Extension	Microsoft Corporation	c:\windows\system32\audiodev.dll
+ PostAgent	Web Site Monitor	Microsoft Corporation	c:\windows\system32\webcheck.dll
+ Previous Versions	Previous Versions property page	Microsoft Corporation	c:\windows\system32\twext.dll
+ Previous Versions Property Page	Previous Versions property page	Microsoft Corporation	c:\windows\system32\twext.dll
+ Printers Security Page	Security Shell Extension	Microsoft Corporation	c:\windows\system32\rshx32.dll
+ Remote Sessions CPL Extension	Remote Sessions CPL Extension	Microsoft Corporation	c:\windows\system32\remotepg.dll
+ RISING	Rising Shell Ext Module	Beijing Rising Information Technology Co., Ltd.	c:\windows\system32\ravext.dll
+ Safearchive ContextMenu Class			c:\program files\lenovosecuritysolution fp\farchns.dll
+ Safearchive ExtractIcon Class			c:\program files\lenovosecuritysolution fp\farchns.dll
+ Safearchive PropertySheetHandler Class			c:\program files\lenovosecuritysolution fp\farchns.dll
+ Safearchive ShellFolder Class			c:\program files\lenovosecuritysolution fp\farchns.dll
+ Search Assistant OC	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ Sendmail service	Send Mail	Microsoft Corporation	c:\windows\system32\sendmail.dll
+ Sendmail service	Send Mail	Microsoft Corporation	c:\windows\system32\sendmail.dll
+ Set Program Access and Defaults	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ Shell Application Manager	Shell Application Manager	Microsoft Corporation	c:\windows\system32\appwiz.cpl
+ Shell Automation Inproc Service	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ Shell Band Site Menu	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ Shell DocObject Viewer	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ Shell extensions for Microsoft Windows Network objects	Network object shell UI	Microsoft Corporation	c:\windows\system32\ntlanui2.dll
+ Shell extensions for sharing	Shell extensions for sharing	Microsoft Corporation	c:\windows\system32\ntshrui.dll
+ Shell extensions for sharing	Shell extensions for sharing	Microsoft Corporation	c:\windows\system32\ntshrui.dll
+ Shell Icon Handler for Application References	Application Deployment Support Library	Microsoft Corporation	c:\windows\system32\dfshim.dll
+ Shell Image Data Factory	Windows ͼƬʹ鿴	Microsoft Corporation	c:\windows\system32\shimgvw.dll
+ Shell Image Property Handler	Windows ͼƬʹ鿴	Microsoft Corporation	c:\windows\system32\shimgvw.dll
+ Shell Image Verbs	Windows ͼƬʹ鿴	Microsoft Corporation	c:\windows\system32\shimgvw.dll
+ Shell properties for a DS object	Directory Service Find	Microsoft Corporation	c:\windows\system32\dsquery.dll
+ Shell Scrap DataHandler	Shell scrap object handler	Microsoft Corporation	c:\windows\system32\shscrap.dll
+ Shell Search Band	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ ShellLink for Application References	Application Deployment Support Library	Microsoft Corporation	c:\windows\system32\dfshim.dll
+ Subscription Folder	Web Site Monitor	Microsoft Corporation	c:\windows\system32\webcheck.dll
+ Subscription Mgr	Web Site Monitor	Microsoft Corporation	c:\windows\system32\webcheck.dll
+ Tasks Folder Icon Handler	Task Scheduler interface DLL	Microsoft Corporation	c:\windows\system32\mstask.dll
+ Tasks Folder Shell Extension	Task Scheduler interface DLL	Microsoft Corporation	c:\windows\system32\mstask.dll
+ Temporary Internet Files	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ Temporary Internet Files	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ TeraCopy			d:\program files\teracopy\teracopy.dll
+ TeraCopy			d:\program files\teracopy\teracopyext.dll
+ The Internet	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
+ TrayAgent	Web Site Monitor	Microsoft Corporation	c:\windows\system32\webcheck.dll
+ TridentImageExtractor	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ UltraISO	ISOShell	EZB Systems, Inc.	d:\program files\ultraiso\isoshell.dll
+ UnlockerShellExtension			d:\program files\unlocker\unlockercom.dll
+ Video Media Properties Handler	Media File Property Extractor Shell Extension	Microsoft Corporation	c:\windows\system32\shmedia.dll
+ Video Thumbnail Extractor	Media File Property Extractor Shell Extension	Microsoft Corporation	c:\windows\system32\shmedia.dll
+ Wav Properties Handler	Media File Property Extractor Shell Extension	Microsoft Corporation	c:\windows\system32\shmedia.dll
+ WdmidleDeviceShellExtension			c:\program files\lenovo\energycut\powcpl.dll
+ Web Folders	Windows executable	Microsoft Corporation	c:\program files\common files\microsoft shared\web folders\msonsext.dll
+ Web Printer Shell Extension	Print UI DLL	Microsoft Corporation	c:\windows\system32\printui.dll
+ Web 	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ WebCheck	Web Site Monitor	Microsoft Corporation	c:\windows\system32\webcheck.dll
+ WebCheck SyncMgr Handler	Web Site Monitor	Microsoft Corporation	c:\windows\system32\webcheck.dll
+ WebCheckChannelAgent	Web Site Monitor	Microsoft Corporation	c:\windows\system32\webcheck.dll
+ WebCheckWebCrawler	Web Site Monitor	Microsoft Corporation	c:\windows\system32\webcheck.dll
+ Windows Media Player Add to Playlist Context Menu Handler	Windows Media Player 	Microsoft Corporation	c:\windows\system32\wmpshell.dll
+ Windows Media Player Burn Audio CD Context Menu Handler	Windows Media Player 	Microsoft Corporation	c:\windows\system32\wmpshell.dll
+ Windows Media Player Play as Playlist Context Menu Handler	Windows Media Player 	Microsoft Corporation	c:\windows\system32\wmpshell.dll
+ Windows Script Host  Shell extensions	Microsoft (R) Shell Extension for Windows Script Host	Microsoft Corporation	c:\windows\system32\wshext.dll
+ WinRAR shell extension			c:\program files\winrar\rarext.dll
+ ֧	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ ֧	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ ļ	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ ļ 2	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ е	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ ַ EditBox	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ ַ(&A)	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ ʼ	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ ٵ	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ İ	Windows Briefcase	Microsoft Corporation	c:\windows\system32\syncui.dll
+ 	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ ȡ Passport 	Map Network Drives/Network Places Wizard	Microsoft Corporation	c:\windows\system32\netplwiz.dll
+ ɷʵ	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ ȫļ	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ ƻ	Task Scheduler interface DLL	Microsoft Corporation	c:\windows\system32\mstask.dll
+ ͡ʼ˵	Windows Shell Common Dll	Microsoft Corporation	c:\windows\system32\shell32.dll
+ ɨǺ	Imaging Devices Shell Folder UI	Microsoft Corporation	c:\windows\system32\wiashext.dll
+ ɨǺ	Imaging Devices Shell Folder UI	Microsoft Corporation	c:\windows\system32\wiashext.dll
+ ɨǺ	Imaging Devices Shell Folder UI	Microsoft Corporation	c:\windows\system32\wiashext.dll
+ ɨǺ	Imaging Devices Shell Folder UI	Microsoft Corporation	c:\windows\system32\wiashext.dll
+ ɨǺ	Imaging Devices Shell Folder UI	Microsoft Corporation	c:\windows\system32\wiashext.dll
+ 	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ ͨ Web Ƭ	Map Network Drives/Network Places Wizard	Microsoft Corporation	c:\windows\system32\netplwiz.dll
+ ͨü弴豸	UPNP Tray Monitor and Folder	Microsoft Corporation	c:\windows\system32\upnpui.dll
+ ѻļ	Client Side Caching UI	Microsoft Corporation	c:\windows\system32\cscui.dll
+  DeskBar	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+  DeskBarApp	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+  Rebar BandSite	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ ǳ򵼶	Map Network Drives/Network Places Wizard	Microsoft Corporation	c:\windows\system32\netplwiz.dll
+ 	Map Network Drives/Network Places Wizard	Microsoft Corporation	c:\windows\system32\netplwiz.dll
+ 	Network Connections Shell	Microsoft Corporation	c:\windows\system32\netshell.dll
+ 	Network Connections Shell	Microsoft Corporation	c:\windows\system32\netshell.dll
+ ״̬	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ ѹ(zipped)ļ	Compressed (zipped) Folders	Microsoft Corporation	c:\windows\system32\zipfldr.dll
+ û(&P)...	Find People	Microsoft Corporation	c:\program files\outlook express\wabfind.dll
+ û	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ ûʻ	Map Network Drives/Network Places Wizard	Microsoft Corporation	c:\windows\system32\netplwiz.dll
+ ...	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ ժҪϢͼ(DOCFILES)	Windows ͼƬʹ鿴	Microsoft Corporation	c:\windows\system32\shimgvw.dll
+ עĿ·ѡʵó	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ Զ MRU Զб	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ 	Windows Font Folder	Microsoft Corporation	c:\windows\system32\fontext.dll
+ 	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ 	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects			
+ Adobe PDF Link Helper	Adobe PDF Helper for Internet Explorer	Adobe Systems Incorporated	c:\program files\common files\adobe\acrobat\activex\acroiehelpershim.dll
+ FlashGetBHO	FlashGet 	FlashGet	c:\documents and settings\administrator\application data\flashgetbho\flashgetbho3.dll
+ Java(tm) Plug-In 2 SSV Helper	Java(TM) Platform SE binary	Sun Microsystems, Inc.	c:\program files\java\jre6\bin\jp2ssv.dll
+ JQSIEStartDetectorImpl Class	Java(TM) Quick Starter binary	Sun Microsystems, Inc.	c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
+ SafeMon Class	360ȫʿʵʱģ	360.CN	d:\program files\360\360safe\safemon\safemon.dll
+ Thunder Browser Helper	XunLeiBHO	Thunder Networking Technologies,LTD	d:\program files\thunder network\thunder\comdlls\xunleibho_now.dll
+ ThunderAtOnce Class	Ѹ߼֧ģ	Thunder Networking Technologies,LTD	d:\program files\thunder network\thunder\comdlls\tdatonce_now.dll
+ Windows Live ¼	WindowsLiveLogin.dll	Microsoft Corporation	c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll
HKCU\Software\Microsoft\Internet Explorer\UrlSearchHooks			
+ Microsoft Url Search Hook	Internet Explorer	Microsoft Corporation	c:\windows\system32\ieframe.dll
HKLM\Software\Microsoft\Internet Explorer\Toolbar			
+ DAEMON Tools Toolbar	ToolBand Module		c:\program files\daemon tools toolbar\dttoolbar.dll
+ FastAIT 2009 IE Addin	Kingsoft FastAit 2009	Copyright (c) Kingsoft Corporation Limited. All rights reserved.	d:\program files\kingsoft\fastait 2009\addins\ieband.dll
HKLM\Software\Microsoft\Internet Explorer\Extensions			
+ Windows Messenger	Windows Messenger	Microsoft Corporation	c:\program files\messenger\msmsgs.exe
+ ͵ Bluetooth 豸(&B)...			c:\program files\lenovo\bluetooth software\btsendto_ie.htm
+ 			ûзļ:   http://www.lenovo.com
+ ...	Network Diagnostic for Windows XP	Microsoft Corporation	c:\windows\network diagnostic\xpnetdiag.exe
Task Scheduler			
+ MP Scheduled Scan.job	Windows Defender Command Line Utility	Microsoft Corporation	c:\program files\windows defender\mpcmdrun.exe
HKLM\System\CurrentControlSet\Services			
+ 360rp	360 ɱ	360ȫ	d:\program files\360\360sd\360rp.exe
+ AudioSrv	 Windows ĳƵ豸˷ֹƵ豸Ч˷񱻽ãκķ޷	Microsoft Corporation	c:\windows\system32\audiosrv.dll
+ Browser	άϼĸббṩָֹͣбᱻ»ά񱻽ãκֱڴ˷ķ޷	Microsoft Corporation	c:\windows\system32\browser.dll
+ CryptSvc	ṩֹ: ¼ݿȷ Windows ļǩ; ܱĸӴ˼ӺɾŸ֤֤;Կ(Key)ע˼ȡ֤顣˷ֹЩ޷С˷񱻽ãκķ޷	Microsoft Corporation	c:\windows\system32\cryptsvc.dll
+ DcomLaunch	Ϊ DCOM ṩعܡ	Microsoft Corporation	c:\windows\system32\rpcss.dll
+ Dhcp	ͨע͸ IP ַԼ DNS á	Microsoft Corporation	c:\windows\system32\dhcpcsvc.dll
+ dmserver	ͼӲ߼̹;ϢԱá˷ֹ̬״̬Ϣʱ˷񱻽ãκķ޷	Microsoft Corp.	c:\windows\system32\dmserver.dll
+ Dnscache	Ϊ˼ͻϵͳ (DNS) ơ˷ֹͣܽ DNS Ʋλ Active Directory ˷񱻽ãκȷķ񽫲	Microsoft Corporation	c:\windows\system32\dnsrslvr.dll
+ Eventlog	¼鿴鿴 Windows ĳ䷢¼־Ϣ޷ֹ˷	Microsoft Corporation	c:\windows\system32\services.exe
+ helpsvc	ڴ˼а֧ġֹͣ񣬰֧Ľá÷κֱڴ˷ķ޷	Microsoft Corporation	c:\windows\pchealth\helpctr\binaries\pchsvc.dll
+ HidServ	öܽ豸 (HID)ͨʣ̡Զ̿ƺý豸ϵԤȶȰť˷ֹɴ˷ƵȰťС˷񱻽ãκķ޷	Microsoft Corporation	c:\windows\system32\hidserv.dll
+ JavaQuickStarterService	Prefetches JRE files for faster startup of Java applets and applications	Sun Microsystems, Inc.	c:\program files\java\jre6\bin\jqs.exe
+ lanmanserver	ִ֧˼ͨļӡֹܵͣЩܲá񱻽ãκֱڴ˷ķ޷	Microsoft Corporation	c:\windows\system32\srvsvc.dll
+ lanmanworkstation	άԶ̷ĿͻӡֹͣЩӽá񱻽ãκֱڴ˷ķ޷	Microsoft Corporation	c:\windows\system32\wkssvc.dll
+ LmHosts	ԡTCP/IP  NetBIOS (NetBT)Լ NetBIOS ƽ֧֡	Microsoft Corporation	c:\windows\system32\lmhsvc.dll
+ NVSvc	Provides system and desktop level support to the NVIDIA display driver	NVIDIA Corporation	c:\windows\system32\nvsvc32.exe
+ PlugPlay	ʹڼٻûûʶӦӲĸġֹô˷ϵͳȶ	Microsoft Corporation	c:\windows\system32\services.exe
+ PolicyAgent	 IP ȫԼ ISAKMP/Oakley (IKE)  IP ȫ	Microsoft Corporation	c:\windows\system32\lsass.exe
+ ProtectedStorage	ṩ(˽Կ)ıԴ洢ԱֹδȨķ񣬹̻ûķǷʡ	Microsoft Corporation	c:\windows\system32\lsass.exe
+ RpcSs	ṩսӳ (endpoint mapper) Լ RPC 	Microsoft Corporation	c:\windows\system32\rpcss.dll
+ RsRavMon	ravmond	Beijing Rising Information Technology Co., Ltd.	d:\program files\rising\rav\ravmond.exe
+ RsRFWMon	ravmond	Beijing Rising Information Technology Co., Ltd.	d:\program files\rising\rfw\ravmond.exe
+ SamSs	洢ûʻİȫϢ	Microsoft Corporation	c:\windows\system32\lsass.exe
+ Schedule	ʹûڴ˼úƶԶճ̡˷ֹЩ޷ճʱС˷񱻽ãκķ޷	Microsoft Corporation	c:\windows\system32\schedsvc.dll
+ seclogon	滻ƾµý̡˷ֹ͵¼ʽá˷񱻽ãκķ޷	Microsoft Corporation	c:\windows\system32\seclogon.dll
+ SENS	ϵͳ¼¼ WindowsԼԴ¼ȡЩ¼֪ͨ COM+ ¼ϵͳ (subscriber)	Microsoft Corporation	c:\windows\system32\sens.dll
+ SharedAccess	ΪͥСͰ칫ṩַתѰַƽ/ֱ	Microsoft Corporation	c:\windows\system32\ipnathlp.dll
+ ShellHWDetection	ΪԶӲ¼ṩ֪ͨ	Microsoft Corporation	c:\windows\system32\shsvcs.dll
+ Spooler	ļصڴԱٺӡ	Microsoft Corporation	c:\windows\system32\spoolsv.exe
+ srservice	ִϵͳԭܡ Ҫֹͣӡҵĵԡеϵͳԭѡرϵͳԭ	Microsoft Corporation	c:\windows\system32\srsvc.dll
+ SSCMntr	Monitors the SSCCache and SSCRDisk devices. (SuperSpeed software)	SuperSpeed Software, Inc.	c:\windows\system32\sscmntr.exe
+ SysICUD	Windows update monitor	Lenovo	d:\program files\lenovo\sysic\sysicud.exe
+ Themes	Ϊûṩʹľ顣	Microsoft Corporation	c:\windows\system32\shsvcs.dll
+ TPHDEXLGSVC	ThinkVantage Active Protection System - HDD Logger Module	Lenovo.	c:\windows\system32\tphdexlg.exe
+ TrkWks	ڼ NTFS ļ֮䱣ӻеļ֮䱣ӡ	Microsoft Corporation	c:\windows\system32\trkwks.dll
+ W32Time	άϵпͻ˺ͷʱͬ˷ֹͣʱڵͬá˷񱻽ãκȷķ񶼽	Microsoft Corporation	c:\windows\system32\w32time.dll
+ WebClient	ʹ Windows ĳܴʺ޸Ļ Internet ļ˷ֹʧȥЩܡ˷񱻽ãκķ޷	Microsoft Corporation	c:\windows\system32\webclnt.dll
+ WinDefend	Helps protect users from malicious software, spyware, and other potentially unwanted software	Microsoft Corporation	c:\program files\windows defender\msmpeng.exe
+ winmgmt	ṩͬĽͶģʽԱйزϵͳ豸ӦóͷĹϢ˷ֹ Windows ޷С˷񱻽ãκķ޷	Microsoft Corporation	c:\windows\system32\wbem\wmisvc.dll
+ wscsvc	ϵͳȫúá	Microsoft Corporation	c:\windows\system32\wscsvc.dll
+ WZCSVC	Ϊ 802.11 ṩԶ	Microsoft Corporation	c:\windows\system32\wzcsvc.dll
HKLM\System\CurrentControlSet\Services			
+ 360AntiArp	360AntiARP	360ȫ	c:\windows\system32\drivers\360antiarp.sys
+ 360SelfProtection	360ȫʿ - SelfProtection	360ȫ	c:\windows\system32\drivers\360selfprotection.sys
+ ACPI	ACPI Driver for NT	Microsoft Corporation	c:\windows\system32\drivers\acpi.sys
+ ACPIEC	ACPI Embedded Controller Driver	Microsoft Corporation	c:\windows\system32\drivers\acpiec.sys
+ ACPIVPC	ACPI Virtual Power Controller Driver	Lenovo Corporation	c:\windows\system32\drivers\acpivpc.sys
+ aec	Microsoft Acoustic Echo Canceller	Microsoft Corporation	c:\windows\system32\drivers\aec.sys
+ AFD	AFD ֻ֧	Microsoft Corporation	c:\windows\system32\drivers\afd.sys
+ Arp1394	1394 ARP ͻЭ	Microsoft Corporation	c:\windows\system32\drivers\arp1394.sys
+ AsyncMac	RAS Asynchronous Media Driver	Microsoft Corporation	c:\windows\system32\drivers\asyncmac.sys
+ atapi	IDE/ATAPI Port Driver	Microsoft Corporation	c:\windows\system32\drivers\atapi.sys
+ Atmarpc	ATM ARP Client Protocol	Microsoft Corporation	c:\windows\system32\drivers\atmarpc.sys
+ audstub	AudStub Driver	Microsoft Corporation	c:\windows\system32\drivers\audstub.sys
+ ayu0gc5r	IDE/ATAPI Port Driver	Microsoft Corporation	c:\windows\system32\drivers\ayu0gc5r.sys
+ b57w2k	Broadcom NetXtreme Gigabit Ethernet NDIS5.1 Driver.	Broadcom Corporation	c:\windows\system32\drivers\b57xp32.sys
+ Beep	BEEP Driver	Microsoft Corporation	c:\windows\system32\drivers\beep.sys
+ BFSDRV	bfsdrv	360ȫ	c:\windows\system32\drivers\bfsdrv.sys
+ BREGDRV	bregdrv	360ȫ	c:\windows\system32\drivers\bregdrv.sys
+ btaudio	Bluetooth Audio Device	Broadcom Corporation.	c:\windows\system32\drivers\btaudio.sys
+ BTDriver	Bluetooth BTPORT Driver for Windows 2000	Broadcom Corporation.	c:\windows\system32\drivers\btport.sys
+ BTKRNL	Bluetooth Bus Enumerator	Broadcom Corporation.	c:\windows\system32\drivers\btkrnl.sys
+ BTWDNDIS	Bluetooth LAN Access Server Driver	Broadcom Corporation.	c:\windows\system32\drivers\btwdndis.sys
+ btwmodem	Bluetooth BTPORT Driver for Windows 2000	Broadcom Corporation.	c:\windows\system32\drivers\btwmodem.sys
+ BTWUSB	Driver for Bluetooth USB Devices	Broadcom Corporation.	c:\windows\system32\drivers\btwusb.sys
+ Cdaudio	CD-ROM Audio Filter Driver	Microsoft Corporation	c:\windows\system32\drivers\cdaudio.sys
+ Cdrom	SCSI CD-ROM Driver	Microsoft Corporation	c:\windows\system32\drivers\cdrom.sys
+ Changer			ûзļ:   C:\WINDOWS\System32\Drivers\Changer.sys
+ CmBatt	Control Method Battery Driver	Microsoft Corporation	c:\windows\system32\drivers\cmbatt.sys
+ Compbatt	Composite Battery Driver	Microsoft Corporation	c:\windows\system32\drivers\compbatt.sys
+ CSVirtA	Cisco Systems STC Adapter	Cisco Systems, Inc.	c:\windows\system32\drivers\csvirta.sys
+ Disk	PnP Disk Driver	Microsoft Corporation	c:\windows\system32\drivers\disk.sys
+ dmio	NT Disk Manager I/O Driver	Microsoft Corp., Veritas Software	c:\windows\system32\drivers\dmio.sys
+ dmload	NT Disk Manager Startup Driver	Microsoft Corp., Veritas Software.	c:\windows\system32\drivers\dmload.sys
+ DMusic	Microsoft Kernel DLS Synthesizer	Microsoft Corporation	c:\windows\system32\drivers\dmusic.sys
+ drmkaud	Microsoft Kernel DRM Audio Descrambler Filter	Microsoft Corporation	c:\windows\system32\drivers\drmkaud.sys
+ eBoost	eBoostr Filter Driver	eBoostr.com	c:\windows\system32\drivers\eboost.sys
+ EfiMon	360Efimon Driver	滢	c:\windows\system32\drivers\efimon.sys
+ Fdc	Floppy Disk Controller Driver	Microsoft Corporation	c:\windows\system32\drivers\fdc.sys
+ Fips	FIPS Crypto Driver	Microsoft Corporation	c:\windows\system32\drivers\fips.sys
+ Flpydisk	Floppy Driver	Microsoft Corporation	c:\windows\system32\drivers\flpydisk.sys
+ FltMgr	File System Filter Manager Driver	Microsoft Corporation	c:\windows\system32\drivers\fltmgr.sys
+ FsVga	Full Screen Video Driver	Microsoft Corporation	c:\windows\system32\drivers\fsvga.sys
+ Ftdisk	FT Disk Driver	Microsoft Corporation	c:\windows\system32\drivers\ftdisk.sys
+ Gpc	Generic Packet Classifier	Microsoft Corporation	c:\windows\system32\drivers\msgpc.sys
+ hcmon	VMware USB Driver	VMware, Inc.	c:\windows\system32\drivers\hcmon.sys
+ HDAudBus	High Definition Audio Bus Driver v1.0a	Windows (R) Server 2003 DDK provider	c:\windows\system32\drivers\hdaudbus.sys
+ hidusb	USB Miniport Driver for Input Devices	Microsoft Corporation	c:\windows\system32\drivers\hidusb.sys
+ hookcont	HookCont Driver for x86	Beijing Rising Information Technology Co., Ltd.	c:\windows\system32\drivers\hookcont.sys
+ HookPort	360ȫʿ - HookPort	360ȫ	c:\windows\system32\drivers\hookport.sys
+ hooksys	Hooksys.sys	Beijing Rising Information Technology Co., Ltd.	c:\windows\system32\drivers\hooksys.sys
+ HTTP	˷ʵֳıЭ(HTTP)˷񱻽ãκķ޷	Microsoft Corporation	c:\windows\system32\drivers\http.sys
+ i2omgmt			ûзļ:   C:\WINDOWS\System32\Drivers\i2omgmt.sys
+ i8042prt	i8042 Port Driver	Microsoft Corporation	c:\windows\system32\drivers\i8042prt.sys
+ ialm	Intel Graphics Miniport Driver	Intel Corporation	c:\windows\system32\drivers\igxpmp32.sys
+ Imapi	IMAPI Kernel Driver	Microsoft Corporation	c:\windows\system32\drivers\imapi.sys
+ IntcAzAudAddService	Realtek(r) High Definition Audio Function Driver	Realtek Semiconductor Corp.	c:\windows\system32\drivers\rtkhdaud.sys
+ intelppm	Processor Device Driver	Microsoft Corporation	c:\windows\system32\drivers\intelppm.sys
+ Ip6Fw	ΪͥСͰ칫ṩֱ	Microsoft Corporation	c:\windows\system32\drivers\ip6fw.sys
+ IpFilterDriver	IP Traffic Filter Driver	Microsoft Corporation	c:\windows\system32\drivers\ipfltdrv.sys
+ IpInIp	IP in IP Tunnel Driver	Microsoft Corporation	c:\windows\system32\drivers\ipinip.sys
+ IpNat	IP Network Address Translator	Microsoft Corporation	c:\windows\system32\drivers\ipnat.sys
+ IPSec	IPSEC driver	Microsoft Corporation	c:\windows\system32\drivers\ipsec.sys
+ IRENUM	Infra-Red Bus Enumerator	Microsoft Corporation	c:\windows\system32\drivers\irenum.sys
+ isapnp	PNP ISA Bus Driver	Microsoft Corporation	c:\windows\system32\drivers\isapnp.sys
+ ISODrive	ISO DVD/CD-ROM Device Driver	EZB Systems, Inc.	d:\program files\ultraiso\drivers\isodrive.sys
+ Kbdclass	Keyboard Class Driver	Microsoft Corporation	c:\windows\system32\drivers\kbdclass.sys
+ kbdhid	HID Mouse Filter Driver	Microsoft Corporation	c:\windows\system32\drivers\kbdhid.sys
+ kmixer	Kernel Mode Audio Mixer	Microsoft Corporation	c:\windows\system32\drivers\kmixer.sys
+ KSecDD	Kernel Security Support Provider Interface	Microsoft Corporation	c:\windows\system32\drivers\ksecdd.sys
+ lbrtfdc			ûзļ:   C:\WINDOWS\System32\Drivers\lbrtfdc.sys
+ mnmdd	Frame buffer simulator	Microsoft Corporation	c:\windows\system32\drivers\mnmdd.sys
+ Modem	Modem Device Driver	Microsoft Corporation	c:\windows\system32\drivers\modem.sys
+ Mouclass	Mouse Class Driver	Microsoft Corporation	c:\windows\system32\drivers\mouclass.sys
+ mouhid	HID Mouse Filter Driver	Microsoft Corporation	c:\windows\system32\drivers\mouhid.sys
+ MountMgr	Mount Manager	Microsoft Corporation	c:\windows\system32\drivers\mountmgr.sys
+ MRxDAV	WebDav Client Redirector	Microsoft Corporation	c:\windows\system32\drivers\mrxdav.sys
+ MRxSmb	MRXSMB	Microsoft Corporation	c:\windows\system32\drivers\mrxsmb.sys
+ Msfs	Mailslot driver	Microsoft Corporation	c:\windows\system32\drivers\msfs.sys
+ MSKSSRV	MS KS Server	Microsoft Corporation	c:\windows\system32\drivers\mskssrv.sys
+ MSPCLOCK	MS Proxy Clock	Microsoft Corporation	c:\windows\system32\drivers\mspclock.sys
+ MSPQM	MS Proxy Quality Manager	Microsoft Corporation	c:\windows\system32\drivers\mspqm.sys
+ mssmbios	System Management BIOS Driver	Microsoft Corporation	c:\windows\system32\drivers\mssmbios.sys
+ Mup	Multiple UNC Provider driver	Microsoft Corporation	c:\windows\system32\drivers\mup.sys
+ NDIS	NDIS 5.1 wrapper driver	Microsoft Corporation	c:\windows\system32\drivers\ndis.sys
+ NdisTapi	Remote Access NDIS TAPI Driver	Microsoft Corporation	c:\windows\system32\drivers\ndistapi.sys
+ Ndisuio	NDIS ûģʽ I/O Э	Microsoft Corporation	c:\windows\system32\drivers\ndisuio.sys
+ NdisWan	Remote Access NDIS WAN Driver	Microsoft Corporation	c:\windows\system32\drivers\ndiswan.sys
+ NDProxy	NDIS Proxy	Microsoft Corporation	c:\windows\system32\drivers\ndproxy.sys
+ NetBIOS	NetBIOS Interface	Microsoft Corporation	c:\windows\system32\drivers\netbios.sys
+ NetBT	NetBios over Tcpip	Microsoft Corporation	c:\windows\system32\drivers\netbt.sys
+ NETw4x32	Intel? Wireless WiFi Link Driver	Intel Corporation	c:\windows\system32\drivers\netw4x32.sys
+ NIC1394	IEEE1394 Ndis Miniport and Call Manager	Microsoft Corporation	c:\windows\system32\drivers\nic1394.sys
+ nm	Netmon NT Driver	Microsoft Corporation	c:\windows\system32\drivers\nmnt.sys
+ NPF	npf	CACE Technologies	c:\windows\system32\drivers\npf.sys
+ Npfs	NPFS Driver	Microsoft Corporation	c:\windows\system32\drivers\npfs.sys
+ ntiopnp	1.00		c:\windows\system32\drivers\ntiopnp.sys
+ Null	NULL Driver	Microsoft Corporation	c:\windows\system32\drivers\null.sys
+ nv	NVIDIA Compatible Windows 2000 Miniport Driver, Version 101.34 	NVIDIA Corporation	c:\windows\system32\drivers\nv4_mini.sys
+ NwlnkFlt	IPX Traffic Filter Driver	Microsoft Corporation	c:\windows\system32\drivers\nwlnkflt.sys
+ NwlnkFwd	IPX Traffic Forwarder Driver	Microsoft Corporation	c:\windows\system32\drivers\nwlnkfwd.sys
+ ohci1394	1394 OpenHCI Port Driver	Microsoft Corporation	c:\windows\system32\drivers\ohci1394.sys
+ Packet	DDK PACKET Protocol	360ȫ	c:\windows\system32\drivers\protodrv.sys
+ Parport	Parallel Port Driver	Microsoft Corporation	c:\windows\system32\drivers\parport.sys
+ PartMgr	Partition Manager	Microsoft Corporation	c:\windows\system32\drivers\partmgr.sys
+ ParVdm	VDM Parallel Driver	Microsoft Corporation	c:\windows\system32\drivers\parvdm.sys
+ PCI	NT Plug and Play PCI Enumerator	Microsoft Corporation	c:\windows\system32\drivers\pci.sys
+ PCIDump			ûзļ:   C:\WINDOWS\System32\Drivers\PCIDump.sys
+ PCIIde	Generic PCI IDE Bus Driver	Microsoft Corporation	c:\windows\system32\drivers\pciide.sys
+ Pcmcia	PCMCIA Bus Driver	Microsoft Corporation	c:\windows\system32\drivers\pcmcia.sys
+ PDCOMP			ûзļ:   C:\WINDOWS\System32\Drivers\PDCOMP.sys
+ PDFRAME			ûзļ:   C:\WINDOWS\System32\Drivers\PDFRAME.sys
+ PDRELI			ûзļ:   C:\WINDOWS\System32\Drivers\PDRELI.sys
+ PDRFRAME			ûзļ:   C:\WINDOWS\System32\Drivers\PDRFRAME.sys
+ PptpMiniport	WAN Miniport (PPTP)	Microsoft Corporation	c:\windows\system32\drivers\raspptp.sys
+ PSched	QoS Packet Scheduler	Microsoft Corporation	c:\windows\system32\drivers\psched.sys
+ Ptilink	Direct Parallel Link Driver	Parallel Technologies, Inc.	c:\windows\system32\drivers\ptilink.sys
+ RasAcd	Remote Access Auto Connection Driver	Microsoft Corporation	c:\windows\system32\drivers\rasacd.sys
+ Rasl2tp	WAN Miniport (L2TP)	Microsoft Corporation	c:\windows\system32\drivers\rasl2tp.sys
+ RasPppoe	Զ̷ PPPOE 	Microsoft Corporation	c:\windows\system32\drivers\raspppoe.sys
+ Raspti	Direct Parallel	Microsoft Corporation	c:\windows\system32\drivers\raspti.sys
+ Rdbss	Rdbss	Microsoft Corporation	c:\windows\system32\drivers\rdbss.sys
+ RDPCDD	RDP Miniport	Microsoft Corporation	c:\windows\system32\drivers\rdpcdd.sys
+ rdpdr	Microsoft RDP Device redirector	Microsoft Corporation	c:\windows\system32\drivers\rdpdr.sys
+ RDPWD	RDP Terminal Stack Driver (US/Canada Only, Not for Export)	Microsoft Corporation	c:\windows\system32\drivers\rdpwd.sys
+ redbook	Redbook Audio Filter Driver	Microsoft Corporation	c:\windows\system32\drivers\redbook.sys
+ RFWARP	Rising RfwARP Driver	Beijing Rising Information Technology Co., Ltd.	c:\windows\system32\drivers\rfwarp.sys
+ RfwBase9	rfwbase5.sys	Beijing Rising Information Technology Co., Ltd.	c:\windows\system32\drivers\rfwbase.sys
+ rfwtdi	rfwtdi.sys	Beijing Rising Information Technology Co., Ltd.	d:\program files\rising\rfw\rfwtdi.sys
+ rimmptsk	RICOH SD Driver	REDC	c:\windows\system32\drivers\rimmptsk.sys
+ rimsptsk	RICOH MS Driver	REDC	c:\windows\system32\drivers\rimsptsk.sys
+ ROCKEYNT	Feitian ROCKEY4 Device 	Feitian Technologies Co., Ltd.	c:\windows\system32\drivers\rockey4.sys
+ rsfwdrv	rsfwdrv.sys	Beijing Rising Information Technology Co., Ltd.	d:\program files\rising\rfw\rsfwdrv.sys
+ RsNTGDI	RsNTGDI	Beijing Rising Information Technology Co., Ltd.	c:\windows\system32\drivers\rsntgdi.sys
+ SafeBoxKrnl	360ȫʿ - 	360ȫ	c:\windows\system32\drivers\safeboxkrnl.sys
+ SbieDrv	Sandboxie Kernel Mode Driver	tzuk	d:\program files\sandboxie\sbiedrv.sys
+ sdbus	SecureDigital Bus Driver	Microsoft Corporation	c:\windows\system32\drivers\sdbus.sys
+ Secdrv	SafeDisc driver	Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.	c:\windows\system32\drivers\secdrv.sys
+ Serenum	Serial Port Enumerator	Microsoft Corporation	c:\windows\system32\drivers\serenum.sys
+ Serial	Serial Device Driver	Microsoft Corporation	c:\windows\system32\drivers\serial.sys
+ Sfloppy	SCSI Floppy Driver	Microsoft Corporation	c:\windows\system32\drivers\sfloppy.sys
+ Shockprf	Shockproof Disk Driver	Lenovo.	c:\windows\system32\drivers\apsx86.sys
+ smserial	Motorola SM56 Modem WDM Driver	Motorola Inc.	c:\windows\system32\drivers\smserial.sys
+ splitter	Microsoft Kernel Audio Splitter	Microsoft Corporation	c:\windows\system32\drivers\splitter.sys
+ sptd			c:\windows\system32\drivers\sptd.sys
+ Srv	Srv	Microsoft Corporation	c:\windows\system32\drivers\srv.sys
+ SSCBus	RamDisk device enumerator	SuperSpeed Software, Inc.	c:\windows\system32\drivers\sscbus.sys
+ SscRdBus	RamDisk virtual bus driver (5.1 on x86)	SuperSpeed LLC	c:\windows\system32\drivers\sscrdbus.sys
+ SSCRDisk	RamDisk device driver	SuperSpeed Software, Inc.	c:\windows\system32\drivers\sscrdisk.sys
+ swenum	Plug and Play Software Device Enumerator	Microsoft Corporation	c:\windows\system32\drivers\swenum.sys
+ swmidi	Microsoft GS Wavetable Synthesizer	Microsoft Corporation	c:\windows\system32\drivers\swmidi.sys
+ sysaudio	System Audio WDM Filter	Microsoft Corporation	c:\windows\system32\drivers\sysaudio.sys
+ SysICDrv	Sample File System Filter Driver	Windows (R) Codename Longhorn DDK provider	c:\windows\system32\drivers\sysicdrv.sys
+ tcm			c:\windows\system32\drivers\tcm.sys
+ Tcpip	TCP/IP Protocol Driver	Microsoft Corporation	c:\windows\system32\drivers\tcpip.sys
+ TcUsb	TouchChip USB Kernel Driver	UPEK Inc.	c:\windows\system32\drivers\tcusb.sys
+ TDPIPE	Named Pipe Transport Driver	Microsoft Corporation	c:\windows\system32\drivers\tdpipe.sys
+ TDTCP	TCP Transport Driver	Microsoft Corporation	c:\windows\system32\drivers\tdtcp.sys
+ TermDD	Terminal Server Driver	Microsoft Corporation	c:\windows\system32\drivers\termdd.sys
+ TPDIGIMN	APS Digitizer Activity Monitor	Lenovo.	c:\windows\system32\drivers\apshm86.sys
+ Update	Update Driver	Microsoft Corporation	c:\windows\system32\drivers\update.sys
+ usbccgp	USB Common Class Generic Parent Driver	Microsoft Corporation	c:\windows\system32\drivers\usbccgp.sys
+ usbehci	EHCI eUSB Miniport Driver	Microsoft Corporation	c:\windows\system32\drivers\usbehci.sys
+ usbhub	Default Hub Driver for USB	Microsoft Corporation	c:\windows\system32\drivers\usbhub.sys
+ USBSTOR	USB Mass Storage Class Driver	Microsoft Corporation	c:\windows\system32\drivers\usbstor.sys
+ usbuhci	UHCI USB Miniport Driver	Microsoft Corporation	c:\windows\system32\drivers\usbuhci.sys
+ VBoxDrv	VirtualBox Support Driver	Sun Microsystems, Inc.	c:\windows\system32\drivers\vboxdrv.sys
+ VBoxNetAdp	VirtualBox Host-Only Network Adapter Driver	Sun Microsystems, Inc.	c:\windows\system32\drivers\vboxnetadp.sys
+ VBoxNetFlt	VirtualBox Host Interface Networking Driver	Windows (R) Server 2003 DDK provider	c:\windows\system32\drivers\vboxnetflt.sys
+ VBoxUSBMon	VirtualBox USB Monitor Driver	Sun Microsystems, Inc.	c:\windows\system32\drivers\vboxusbmon.sys
+ VgaSave	 VGA ʾṩʾܡ	Microsoft Corporation	c:\windows\system32\drivers\vga.sys
+ vmci	Virtual Machine Communication Interface	VMware, Inc.	c:\windows\system32\drivers\vmci.sys
+ vmkbd	VMware Keyboard Driver	VMware, Inc.	c:\windows\system32\drivers\vmkbd.sys
+ VMnetAdapter	Driver for VMware's Virtual Ethernet Adapters Ver. 2	VMware, Inc.	c:\windows\system32\drivers\vmnetadapter.sys
+ VMnetBridge	VMware Bridge Protocol	VMware, Inc.	c:\windows\system32\drivers\vmnetbridge.sys
+ VMnetuserif	Allows VMware applications to use virtual networks.	VMware, Inc.	c:\windows\system32\drivers\vmnetuserif.sys
+ vmx86	VMware Virtualization Driver	VMware, Inc.	c:\windows\system32\drivers\vmx86.sys
+ VolSnap	Volume Shadow Copy Driver	Microsoft Corporation	c:\windows\system32\drivers\volsnap.sys
+ vstor2	VMware Virtual Storage Volume Driver	VMware, Inc.	c:\program files\common files\vmware\vmware virtual image editing\vstor2.sys
+ vstor2-ws60	VMware Virtual Storage Volume Driver	VMware, Inc.	d:\program files\vmware\vmware workstation\vstor2-ws60.sys
+ Wanarp	Remote Access IP ARP Driver	Microsoft Corporation	c:\windows\system32\drivers\wanarp.sys
+ WDICA			ûзļ:   C:\WINDOWS\System32\Drivers\WDICA.sys
+ wdmaud	MMSYSTEM Wave/Midi API mapper	Microsoft Corporation	c:\windows\system32\drivers\wdmaud.sys
+ WmiAcpi	Windows Management Interface for ACPI	Microsoft Corporation	c:\windows\system32\drivers\wmiacpi.sys
+ WS2IFSL	Winsock2 IFS Layer	Microsoft Corporation	c:\windows\system32\drivers\ws2ifsl.sys
+ WudfPf	Provide communciation services for UMDF components.	Microsoft Corporation	c:\windows\system32\drivers\wudfpf.sys
+ WudfRd	Reflect device requests to user-mode driver drivers	Microsoft Corporation	c:\windows\system32\drivers\wudfrd.sys
HKLM\System\CurrentControlSet\Control\Session Manager\BootExecute			
+ autocheck autochk *			ûзļ:   autocheck
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options			
+ Your Image File Name Here without a path	Symbolic Debugger for Windows 2000	Microsoft Corporation	c:\windows\system32\ntsd.exe
HKLM\System\CurrentControlSet\Control\Session Manager\KnownDlls			
+ advapi32	Advanced Windows 32 Base API	Microsoft Corporation	c:\windows\system32\advapi32.dll
+ comdlg32	Common Dialogs DLL	Microsoft Corporation	c:\windows\system32\comdlg32.dll
+ gdi32	GDI Client DLL	Microsoft Corporation	c:\windows\system32\gdi32.dll
+ imagehlp	Windows NT Image Helper	Microsoft Corporation	c:\windows\system32\imagehlp.dll
+ kernel32	Windows NT BASE API Client DLL	Microsoft Corporation	c:\windows\system32\kernel32.dll
+ lz32	LZ Expand/Compress API DLL	Microsoft Corporation	c:\windows\system32\lz32.dll
+ ole32	Microsoft OLE for Windows	Microsoft Corporation	c:\windows\system32\ole32.dll
+ oleaut32		Microsoft Corporation	c:\windows\system32\oleaut32.dll
+ olecli32	Object Linking and Embedding Client Library	Microsoft Corporation	c:\windows\system32\olecli32.dll
+ olecnv32	Microsoft OLE for Windows	Microsoft Corporation	c:\windows\system32\olecnv32.dll
+ olesvr32	Object Linking and Embedding Server Library	Microsoft Corporation	c:\windows\system32\olesvr32.dll
+ olethk32	Microsoft OLE for Windows	Microsoft Corporation	c:\windows\system32\olethk32.dll
+ rpcrt4	Remote Procedure Call Runtime	Microsoft Corporation	c:\windows\system32\rpcrt4.dll
+ shell32	Windows Shell Common Dll	Microsoft Corporation	c:\windows\system32\shell32.dll
+ url	Internet Shortcut Shell Extension DLL	Microsoft Corporation	c:\windows\system32\url.dll
+ urlmon	OLE32 Extensions for Win32	Microsoft Corporation	c:\windows\system32\urlmon.dll
+ user32	Windows XP USER API Client DLL	Microsoft Corporation	c:\windows\system32\user32.dll
+ version	Version Checking and File Installation Libraries	Microsoft Corporation	c:\windows\system32\version.dll
+ wininet	Internet Extensions for Win32	Microsoft Corporation	c:\windows\system32\wininet.dll
+ wldap32	Win32 LDAP API DLL	Microsoft Corporation	c:\windows\system32\wldap32.dll
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\UIHost			
+ logonui.exe	Windows Logon UI	Microsoft Corporation	c:\windows\system32\logonui.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify			
+ crypt32chain	Crypto API32	Microsoft Corporation	c:\windows\system32\crypt32.dll
+ cryptnet	Crypto Network Related API	Microsoft Corporation	c:\windows\system32\cryptnet.dll
+ cscdll	Offline Network Agent	Microsoft Corporation	c:\windows\system32\cscdll.dll
+ dimsntfy	DIMS Notification Handler	Microsoft Corporation	c:\windows\system32\dimsntfy.dll
+ igfxcui	igfxdev Module	Intel Corporation	c:\windows\system32\igfxdev.dll
+ psfus			c:\windows\system32\psqlpwd.dll
+ ScCertProp	Common DLL to receive Winlogon notifications	Microsoft Corporation	c:\windows\system32\wlnotify.dll
+ Schedule	Common DLL to receive Winlogon notifications	Microsoft Corporation	c:\windows\system32\wlnotify.dll
+ sclgntfy	Secondary Logon Service Notification DLL	Microsoft Corporation	c:\windows\system32\sclgntfy.dll
+ SensLogn	Common DLL to receive Winlogon notifications	Microsoft Corporation	c:\windows\system32\wlnotify.dll
+ termsrv	Common DLL to receive Winlogon notifications	Microsoft Corporation	c:\windows\system32\wlnotify.dll
+ WgaLogon	Windows ֵƻ֪ͨ	Microsoft Corporation	c:\windows\system32\wgalogon.dll
+ wlballoon	Common DLL to receive Winlogon notifications	Microsoft Corporation	c:\windows\system32\wlnotify.dll
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GinaDLL			
+ vrlogon.dll			c:\windows\system32\vrlogon.dll
HKCU\Control Panel\Desktop\Scrnsave.exe			
+ C:\WINDOWS\system32\logon.scr	Logon Screen Saver	Microsoft Corporation	c:\windows\system32\logon.scr
HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9			
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{20BEE568-4916-4635-A8D1-D0FBC0E9EB4C}] DATAGRAM 4	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{20BEE568-4916-4635-A8D1-D0FBC0E9EB4C}] SEQPACKET 4	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{21A57617-9D4B-45A5-8A6E-D3F89BCFC7F4}] DATAGRAM 8	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{21A57617-9D4B-45A5-8A6E-D3F89BCFC7F4}] SEQPACKET 8	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{23DC56E2-9501-4351-A566-8B3B66737B4A}] DATAGRAM 3	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{23DC56E2-9501-4351-A566-8B3B66737B4A}] SEQPACKET 3	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{51464779-F5F6-440A-A897-E3FAE76192B4}] DATAGRAM 2	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{51464779-F5F6-440A-A897-E3FAE76192B4}] SEQPACKET 2	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{64A25668-C9E6-49D2-BA8F-36783AC545DE}] DATAGRAM 6	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{64A25668-C9E6-49D2-BA8F-36783AC545DE}] SEQPACKET 6	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{8DDB353D-877A-4258-BF57-F48AEB00413A}] DATAGRAM 1	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{8DDB353D-877A-4258-BF57-F48AEB00413A}] SEQPACKET 1	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{9D6AB726-FFF7-4D55-97CC-7B8EED349E65}] DATAGRAM 0	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{9D6AB726-FFF7-4D55-97CC-7B8EED349E65}] SEQPACKET 0	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{AB5AA142-34A9-40CB-B76E-02F65A97D646}] DATAGRAM 5	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{AB5AA142-34A9-40CB-B76E-02F65A97D646}] SEQPACKET 5	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{D705D259-4249-4AB3-929C-0921F5592B6E}] DATAGRAM 7	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{D705D259-4249-4AB3-929C-0921F5592B6E}] SEQPACKET 7	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{F1A02D7C-CD0D-4317-AA34-E72F320A4D30}] DATAGRAM 10	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{F1A02D7C-CD0D-4317-AA34-E72F320A4D30}] SEQPACKET 10	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{F5D74DFE-57DC-4362-841A-DBF1CED57AF0}] DATAGRAM 9	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{F5D74DFE-57DC-4362-841A-DBF1CED57AF0}] SEQPACKET 9	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ MSAFD Tcpip [RAW/IP]	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ MSAFD Tcpip [TCP/IP]	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ MSAFD Tcpip [UDP/IP]	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ RSVP TCP Service Provider	Microsoft Windows Rsvp 1.0 Service Provider	Microsoft Corporation	c:\windows\system32\rsvpsp.dll
+ RSVP UDP Service Provider	Microsoft Windows Rsvp 1.0 Service Provider	Microsoft Corporation	c:\windows\system32\rsvpsp.dll
+ VMCI sockets DGRAM	VSockets Library	VMware, Inc.	d:\program files\vmware\vmware workstation\vsocklib.dll
+ VMCI sockets STREAM	VSockets Library	VMware, Inc.	d:\program files\vmware\vmware workstation\vsocklib.dll
HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors			
+ BJ Language Monitor	Langage Monitor for Canon Bubble-Jet Printer	Microsoft Corporation	c:\windows\system32\cnbjmon.dll
+ Bluetooth ӡ˿	bthcrp DLL	Broadcom Corporation.	c:\windows\system32\bthcrp.dll
+ Local Port	Local Spooler DLL	Microsoft Corporation	c:\windows\system32\localspl.dll
+ Microsoft Document Imaging Writer Monitor	Microsoft? Document Imaging	Microsoft Corporation	c:\windows\system32\mdimon.dll
+ PJL Language Monitor	PJL Language monitor	Microsoft Corporation	c:\windows\system32\pjlmon.dll
+ Standard TCP/IP Port	Standard TCP/IP Port Monitor DLL	Microsoft Corporation	c:\windows\system32\tcpmon.dll
+ USB Monitor	Standard Dynamic Printing Port Monitor DLL	Microsoft Corporation	c:\windows\system32\usbmon.dll
HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SecurityProviders			
+ digest.dll	Digest SSPI Authentication Package	Microsoft Corporation	c:\windows\system32\digest.dll
+ msapsspc.dll	DPA Client for 32 bit platforms	Microsoft Corporation	c:\windows\system32\msapsspc.dll
+ msnsspc.dll	MSN Internet Access	Microsoft Corporation	c:\windows\system32\msnsspc.dll
+ schannel.dll	TLS / SSL Security Provider	Microsoft Corporation	c:\windows\system32\schannel.dll
HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Authentication Packages			
+ msv1_0	Microsoft Authentication Package v1.0	Microsoft Corporation	c:\windows\system32\msv1_0.dll
HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Notification Packages			
+ psqlpwd			c:\windows\system32\psqlpwd.dll
+ scecli	Windows Security Configuration Editor Client Engine	Microsoft Corporation	c:\windows\system32\scecli.dll
HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Security Packages			
+ kerberos	Kerberos Security Package	Microsoft Corporation	c:\windows\system32\kerberos.dll
+ msv1_0	Microsoft Authentication Package v1.0	Microsoft Corporation	c:\windows\system32\msv1_0.dll
+ schannel	TLS / SSL Security Provider	Microsoft Corporation	c:\windows\system32\schannel.dll
+ wdigest	Microsoft Digest Access	Microsoft Corporation	c:\windows\system32\wdigest.dll
HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order			
+ LanmanWorkstation	Microsoft Windows Network	Microsoft Corporation	c:\windows\system32\ntlanman.dll
+ RDPNP	Microsoft Terminal Services	Microsoft Corporation	c:\windows\system32\drprov.dll
+ WebClient	Web Client Network	Microsoft Corporation	c:\windows\system32\davclnt.dll
