[D:\Program Files\MSNShell\BIN\ShellDll.dll] [N/A, N/A]
[PID: 504][D:\Program Files\Skype\Phone\Skype.exe] [Skype Technologies S.A., 3.0.4.209]
[C:\WINDOWS\system32\msdmo.dll] [N/A, N/A]
[PID: 2500][D:\Program Files\Skype\Phone\ContentFilter.exe] [TOM Online Inc., 1.0.3.0]
[D:\Program Files\MSNShell\BIN\ShellDll.dll] [N/A, N/A]
[PID: 3488][D:\Program Files\Skype\Plugin Manager\SkypePM.exe] [Skype Technologies, 1.0.0.171]
[D:\Program Files\Skype\Plugin Manager\ezPMUtils.dll] [EasyBits Software Corp., 1.0.0.536]
[PID: 1468][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] [RealNetworks, Inc., 0.1.0.3510]
[D:\Program Files\MSNShell\BIN\ShellDll.dll] [N/A, N/A]
[PID: 2884][C:\Program Files\TTPlayer\TTPlayer.exe] [Alen Soft, 4, 6, 0, 0]
[C:\Program Files\TTPlayer\ttpcomm.dll] [N/A, N/A]
[C:\Program Files\TTPlayer\ttpres.dll] [Alen Soft, 4, 6, 5, 0]
[C:\Program Files\TTPlayer\AddIn\ttp_asf.dll] [N/A, N/A]
[C:\Program Files\TTPlayer\AddIn\ttp_aac.dll] [N/A, N/A]
[C:\Program Files\TTPlayer\AddIn\ttp_ac3dts.dll] [N/A, N/A]
[C:\Program Files\TTPlayer\AddIn\ttp_lrcsh.dll] [N/A, N/A]
[PID: 2992][D:\Program Files\Maxthon\Maxthon.exe] [Maxthon International Ltd., 1, 5, 9, 30]
[D:\Program Files\Maxthon\maxzlib.dll] [ , 1, 0, 0, 2]
[D:\Program Files\Thunder Network\Thunder\ComDlls\XUNLEIBHO_002.dll] [Thunder Networking Technologies,LTD, 5, 0, 0, 2]
[d:\Program Files\Thunder Network\WebThunder\WebThunderBHO_015.dll] [Thunder Networking Technologies,LTD, 6, 0, 0, 5]
[D:\Program Files\VMware\VMware Workstation\vmPerfmon.dll] [VMware, Inc., 5.5.1 build-19175]
[D:\Program Files\Maxthon\Services\RealTime\real_time.dll] [, 1, 0, 0, 1]
[D:\Program Files\MSNShell\BIN\ShellDll.dll] [N/A, N/A]
[C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0]
[PID: 640][D:\SREng2\SREng.EXE] [Smallfrogs Studio, 2.3.13.690]
[PID: 3352][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
[C:\]
[autorun]
shellexecute=Recycled\Recycled\ctfmon.exe
shell\Open(&O)\command=Recycled\Recycled\ctfmon.exe
shell=Open(&0)
[D:\]
[autorun]
shellexecute=Recycled\ctfmon.exe
shell\Open(&0)\command=Recycled\ctfmon.exe
shell=Open(&0)
[E:\]
[autorun]
shellexecute=Recycled\ctfmon.exe
shell\Open(&0)\command=Recycled\ctfmon.exe
shell=Open(&0)
[F:\]
[autorun]
shellexecute=Recycled\ctfmon.exe
shell\Open(&0)\command=Recycled\ctfmon.exe
shell=Open(&0)
==================================
HOSTS 文件
127.0.0.1 localhost
