2006-08-25,13:56:29
System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)
Windows XP Professional Service Pack 1 (Build 2600)
- 管理权限用户 - 完整功能
以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS.0\System32\ctfmon.exe> [Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> []
<run><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><; "C:\WINDOWS.0\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [Microsoft Corporation]
<PHIME2002ASync><; C:\WINDOWS.0\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation]
<avast!><C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe> []
<StormCodec_Helper><"C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti> []
<TkBellExe><; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.]
<SiS Windows KeyHook><C:\WINDOWS.0\System32\keyhook.exe> []
<SiS KHooker><C:\WINDOWS.0\System32\khooker.exe> [Silicon Integrated Systems Corporation]
<Thunder><; "C:\Program Files\Thunder Network\Thunder\Thunder.exe" /s> [Thunder Networking Technologies,LTD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [Microsoft Corporation]
<Userinit><C:\WINDOWS.0\SYSTEM32\Userinit.exe,> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Explorer]
<WinlogonNotify: Explorer><C:\WINDOWS.0\system32\ktjul7191.dll> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Run]
<WinlogonNotify: Run><C:\WINDOWS.0\system32\jtpo0773e.dll> []
==================================
启动文件夹
服务
[avast! iAVS4 Control Service / aswUpdSv]
<"C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe"><N/A>
[avast! Antivirus / avast! Antivirus]
<"C:\Program Files\Alwil Software\Avast4\ashServ.exe"><N/A>
[avast! Mail Scanner / avast! Mail Scanner]
<"C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service><ALWIL Software>
[avast! Web Scanner / avast! Web Scanner]
<"C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service><ALWIL Software>
[JMediaService / JMediaService]
<C:\WINDOWS.0\System32\rundll32.exe C:\PROGRA~1\MMSASS~1\MMSSVER.DLL,Service><N/A>
[UpdateService / UpdateService]
<C:\WINDOWS.0\System32\UpdateService.exe><N/A>
[winmattm / winmattm]
<C:\WINDOWS.0\system32\mattm.exe -s><N/A>
==================================
浏览器加载项
[Shockwave Flash
Object]
{14A21378-5BB1-4BC4-95D5-5D3F51527F6F} <C:\WINDOWS.0\system32\smflash.ocx, N/A>
[电台(&R)]
{8E718888-423F-11D2-876E-00A0C9082467} <C:\WINDOWS.0\System32\msdxm.ocx, Microsoft Corporation>
[卡卡上网安全助手]
{DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS.0\System32\kakatool.dll, Beijing Rising Technology Co., Ltd.>
[MMCPlayer Class]
{05C1004E-2596-48E5-8E26-39362985EEB9} <C:\WINDOWS.0\Downloaded Program Files\MMCShell.dll, Sohu.com Inc.>
[DiameterTransfer Control]
{266B9238-31A5-4B53-9039-272FE846DF9D} <C:\WINDOWS.0\SISObj\DIAMET~1.OCX, Silicon Integrated Systems Corp.,>
[WebActivater Control]
{3D8F74EE-8692-4F8F-B8D2-7522E732519E} <C:\WINDOWS.0\System32\WEBACT~1.OCX, QQ>
[photo_uploader Control]
{A984ED9F-E8DA-44E5-BC18-C14B9ABEF79D} <C:\WINDOWS.0\DOWNLO~1\PHOTO_~1.OCX, N/A>
[Shockwave Flash
Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS.0\System32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[Ravonline]
{DA984A6D-508E-11D6-AA49-0050FF3C628D} <C:\WINDOWS.0\Downloaded Program Files\RsOnline.dll, Beijing Rising Tech. Co., Ltd.>
[上传到QQ网络硬盘]
<D:\WEN\QQ\AddToNetDisk.htm, N/A>
[添加到QQ自定义面板]
<D:\WEN\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
<D:\WEN\QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<D:\WEN\QQ\SendMMS.htm, N/A>
==================================
正在运行的进程
[PID: 1476][C:\WINDOWS.0\system32\rundll32.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[C:\WINDOWS.0\system32\xhidvfw.dll] <N/A><N/A>
[PID: 1780][C:\WINDOWS.0\Explorer.EXE] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)>
[C:\Program Files\Alwil Software\Avast4\AhJsctNs.dll] <ALWIL Software><4, 6, 763, 0>
[PID: 1980][C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe] <N/A><5, 0, 0, 0>
[C:\PROGRA~1\ALWILS~1\Avast4\aswCmnOS.dll] <ALWIL Software><4, 7, 844, 0>
[C:\PROGRA~1\ALWILS~1\Avast4\ashBase.dll] <ALWIL Software><4, 7, 844, 0>
[C:\PROGRA~1\ALWILS~1\Avast4\aswCmnB.dll] <ALWIL Software><4, 7, 844, 0>
[C:\PROGRA~1\ALWILS~1\Avast4\aswCmnS.dll] <ALWIL Software><4, 7, 844, 0>
[C:\PROGRA~1\ALWILS~1\Avast4\ashTask.dll] <ALWIL Software><4, 7, 844, 0>
[C:\PROGRA~1\ALWILS~1\Avast4\aswAux.dll] <ALWIL Software><4, 7, 844, 0>
[C:\PROGRA~1\ALWILS~1\Avast4\Aavm4h.dll] <ALWIL Software><4, 7, 869, 0>
[C:\Program Files\Alwil Software\Avast4\ChineseS\Base.dll] <ALWIL Software><4, 7, 800, 0>
[C:\Program Files\Alwil Software\Avast4\ChineseS\Lang.dll] <ALWIL Software><4, 7, 844, 0>
[C:\PROGRA~1\ALWILS~1\Avast4\AavmRpch.dll] <ALWIL Software><4, 7, 869, 0>
[c:\program files\alwil software\avast4\ahruimai.dll] <ALWIL Software><4, 7, 869, 0>
[C:\PROGRA~1\ALWILS~1\Avast4\ashUInt.dll] <ALWIL Software><4, 7, 869, 0>
[C:\PROGRA~1\ALWILS~1\Avast4\XT1922.dll] <Codejock Software><1, 9, 4, 0>
[c:\program files\alwil software\avast4\ahruimes.dll] <ALWIL Software><4, 7, 869, 0>
[c:\program files\alwil software\avast4\ahruins.dll] <ALWIL Software><4, 7, 869, 0>
[c:\program files\alwil software\avast4\ahruiout.dll] <ALWIL Software><4, 7, 869, 0>
[c:\program files\alwil software\avast4\ahruip2p.dll] <ALWIL Software><4, 7, 869, 0>
[c:\program files\alwil software\avast4\ahruistd.dll] <ALWIL Software><4, 7, 869, 0>
[c:\program files\alwil software\avast4\ahruiws.dll] <ALWIL Software><4, 7, 869, 0>
[c:\program files\alwil software\avast4\ahruijs.dll] <N/A><4, 7, 844, 0>
[C:\Program Files\Alwil Software\Avast4\AhJsctNs.dll] <ALWIL Software><4, 6, 763, 0>
[PID: 2040][C:\WINDOWS.0\System32\khooker.exe] <Silicon Integrated Systems Corporation><0.0.0.3080>
[C:\WINDOWS.0\System32\SiSApCom.dll] <Silicon Integrated Systems Corporation><6.13.10.3080>
[C:\WINDOWS.0\System32\InstFunc.dll] <Silicon Integrated Systems Corporation><6.13.10.3080>
[C:\WINDOWS.0\System32\SiSParse.dll] <Silicon Integrated Systems Corporation><6.13.10.3080>
[C:\Program Files\Alwil Software\Avast4\AhJsctNs.dll] <ALWIL Software><4, 6, 763, 0>
[PID: 124][C:\WINDOWS.0\System32\ctfmon.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[C:\Program Files\Alwil Software\Avast4\AhJsctNs.dll] <ALWIL Software><4, 6, 763, 0>
[PID: 1604][D:\WEN\TT\TTraveler.exe] <腾讯公司><3.0.0.250>
[C:\Program Files\Alwil Software\Avast4\AhJsctNs.dll] <ALWIL Software><4, 6, 763, 0>
[D:\WEN\TT\Plugins\QQFloatBar\QQFloatBar4TT2.dll] <腾讯公司><1, 1, 0, 5>
[D:\WEN\TT\Plugins\TWeather\TWeather.dll] <><1, 0, 0, 3>
[D:\WEN\TT\PersonalDesktop.dll] <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 4>
[PID: 1116][C:\Documents and Settings\WEN2\桌面\sreng2\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505>
[C:\Program Files\Alwil Software\Avast4\AhJsctNs.dll] <ALWIL Software><4, 6, 763, 0>
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS.0\hh.exe" %1]
.HLP OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
==================================
