注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
(ctfmon.exe)(C:\WINDOWS\System32\ctfmon.exe) [Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
(load)() []
(run)() []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
(IMJPMIG8.1)("C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32) [Microsoft Corporation]
(PHIME2002ASync)(C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC) [Microsoft Corporation]
(PHIME2002A)(C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName) [Microsoft Corporation]
(Cmaudio)(RunDll32 cmicnfg.cpl,CMICtrlWnd) []
(ATIPTA)(C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe) [ATI Technologies, Inc.]
(TkBellExe)("C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot) [RealNetworks, Inc.]
(Tray)(C:\WINDOWS\command\rundll32.exe) []
(KAVPersonal50)("C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize) [Kaspersky Lab]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
(9)(C:\WINDOWS\System32\Ravdm.exe) []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
(shell)(Explorer.exe) [Microsoft Corporation]
(Userinit)(C:\WINDOWS\System32\userinit.exe,) [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
(AppInit_DLLs)() []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
(UIHost)(logonui.exe) [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
({57B86673-276A-48B2-BAE7-C6DBB3020EB8})(C:\Program Files\ewido anti-spyware 4.0\shellexecutehook.dll) [Anti-Malware Development a.s.]
({9A0CFC58-5A6F-41ba-9FFE-4320F4F62FB1})(C:\WINDOWS\System32\cnscheck100.dll) []
--------------------------------------------------------------------------------
启动文件夹
[Microsoft Office]
(C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Microsoft Office.lnk)(N)
--------------------------------------------------------------------------------
服务
[Ati HotKey Poller / Ati HotKey Poller]
(C:\WINDOWS\System32\Ati2evxx.exe)(N/A)
[ATI Smart / ATI Smart]
(C:\WINDOWS\system32\ati2sgag.exe)()
[ewido anti-spyware 4.0 guard / ewido anti-spyware 4.0 guard]
(C:\Program Files\ewido anti-spyware 4.0\guard.exe)(Anti-Malware Development a.s.)
[kavsvc / kavsvc]
("C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe")(Kaspersky Lab)
[Macromedia Licensing Service / Macromedia Licensing Service]
("C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe")(N/A)
[Rising Proxy Service / RfwProxySrv]
(c:\program files\rising\rfw\rfwproxy.exe)(Beijing Rising Technology Co., Ltd.)
[Rising Personal Firewall Service / RfwService]
(c:\program files\rising\rfw\rfwsrv.exe)(Beijing Rising Technology Co., Ltd.)
[Remote Packet Capture Protocol v.0 (experimental) / rpcapd]
("C:\Program Files\WinPcap\rpcapd.exe" -d -f "C:\Program Files\WinPcap\rpcapd.ini")(N/A)
[TlMPLatform.exe / TlMPLatform.exe ]
(C:\Program Files\tencent\qqnet.exe)(N/A)
--------------------------------------------------------------------------------
浏览器加载项
[QQBrowserHelper
Object Class]
{54EBD53A-9BC1-480B-966A-843A333CA162} (D:\C盘\QQ2003III丐丐版\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司)
[conimehlp Class]
{B10343BD-1DC6-442F-9BA2-D44C708CEE83} (C:\WINDOWS\System32\mskey32.dll, Microsoft)
[解霸]
{367E0A21-8601-4986-9C9A-153BF5ACA118} (C:\HEROSOFT\Hero3000\MPLAYER.EXE, N/A)
[网页特效制作专家 ]
{8DE0FCD4-5EB5-11D3-AD25-00002100131a} (F:\特效软件\网页特效专家\, N/A)
[屏幕取色*]
{8DE0FCD4-5EB5-11D3-AD25-00002100131c} (F:\特效软件\网页特效专家, N/A)
[海浪视窗主页 ]
{8DE0FCD4-5EB5-11D3-AD25-00002100131e} (F:\特效软件\网页特效专家\syste, N/A)
[FlashGet]
{D6E814A0-E0C5-11d4-8D29-0050BA6940E3} (D:\PROGRA~1\FlashGet\flashget.exe, Amaze Soft)
[QQIEFloatBarCfgCmd Class]
{DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} (D:\C盘\QQ2003III丐丐版\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司)
[电台(&R)]
{8E718888-423F-11D2-876E-00A0C9082467} (C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation)
[FlashGet Bar]
{E0E899AB-F487-11D5-8D29-0050BA6940E3} (D:\PROGRA~1\FlashGet\fgiebar.dll, Amaze Soft)
[InfosecCertInstall Class]
{0EB487C8-E9AC-43A6-8C4C-083999B0622F} (C:\WINDOWS\Downloaded Program Files\certInStall.dll, )
[]
{39EA2F6F-3F50-4F58-9C63-4B3D53B0926E} (C:\WINDOWS\eg_auth_1049.dll, N/A)
[CEditCtrl
Object]
{488A4255-3236-44B3-8F27-FA1AECAA8844} (C:\WINDOWS\System32\aliedit\AliEdit.dll, www.alipay.com)
[AxInputControl Class]
{73E4740C-08EB-4133-896B-8D0A7C9EE3CD} (C:\WINDOWS\DOWNLO~1\INPUTC~1.DLL, )
[]
{8B3B8135-9DAA-40E7-8941-962795F9C1CB} (C:\WINDOWS\System32\syswbsvc32.dll, N/A)
[AxSubmitControl Class]
{8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} (C:\WINDOWS\DOWNLO~1\SUBMIT~1.DLL, )
[MeChatU Class]
{BE9D5F13-40C1-44CA-9950-B9211E4B60DD} (C:\WINDOWS\Downloaded Program Files\MeChatUser.dll, )
[Shockwave Flash
Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} (C:\WINDOWS\System32\Macromed\Flash\Flash8.ocx, Macromedia, Inc.)
[AxUSBKey Class]
{DA215190-98B2-47DE-AE24-DA95481DFFBA} (C:\WINDOWS\DOWNLO~1\USBKey.dll, )
[CPasswordEditCtrl
Object]
{E787FD25-8D7C-4693-AE67-9406BC6E22DF} (C:\WINDOWS\System32\qqedit\qqedit.dll, 腾讯科技（深圳）有限公司)
[使用网际快车下载]
(D:\PROGRA~1\FlashGet\jc_link.htm, N/A)
[使用网际快车下载全部链接]
(D:\PROGRA~1\FlashGet\jc_all.htm, N/A)
--------------------------------------------------------------------------------
