问题:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<HBService32><System.exe> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
<nwiz><cmgot.exe> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{16AF66EB-93C8-49F9-BB09-B4F87CEDCE46}><16AF66EB.dll> []
<{AD794E6B-90B7-4F9D-8FD6-0C16E3298FF2}><AD794E6B.dll> []
<{D7C79813-9233-4AE0-832C-99B2E8019673}><D7C79813.dll> []
<{201476D0-2B18-462E-AB9F-3E2B0CC8732B}><201476D0.dll> []
<{58FF3024-8A83-4B1A-88E9-302F47646EEE}><58FF3024.dll> []
<{3B8DA919-1139-4B10-AD8F-91E8FBCFD375}><3B8DA919.dll> []
<{08223B03-1B38-4A33-A83A-A4D3CC1D6E4E}><08223B03.dll> []
<{122B901E-493F-4AD9-BC69-7DE8C3E52FCC}><122B901E.dll> []
<{E1D19FCC-4777-4D71-B863-6A0A5B4E59BC}><E1D19FCC.dll> []
<{9CA963CA-107C-4089-B0AB-31380F90D7E3}><9CA963CA.dll> []
<{8566F82E-03A4-416E-AEAC-66600D8881F1}><8566F82E.dll> []
<{DA63E650-537C-4042-87BB-9D19D844680B}><DA63E650.dll> []
<{4FBFD5A4-5FE8-4444-8BD9-FD0FAFA64F96}><4FBFD5A4.dll> []
<{A1A6BC2E-C6A1-43C1-8884-A31D772F42B8}><A1A6BC2E.dll> []
<{E4814792-EFA3-4C20-93D0-8B130A59F9A8}><E4814792.dll> []
<{BA7EDF54-8408-4B21-B351-7B447B344BA4}><BA7EDF54.dll> []
<{34A25F04-008D-403E-8EE6-2307BC02FA2E}><34A25F04.dll> []
<{B3721C07-62B3-411A-9DC7-F5F27E3E21FF}><B3721C07.dll> []
<{66AFCB56-FAA9-42D2-8C72-2767A46C7FA8}><66AFCB56.dll> [File is missing]
<{DFEC5CB7-E2AA-4B0A-BEB3-D140E59ED53A}><DFEC5CB7.dll> []
<{C8EB51BC-82D8-4018-8678-5A0580DBA04A}><C8EB51BC.dll> []
<{2EF0D734-21FD-4225-A1A2-BCD296182AAF}><2EF0D734.dll> []
<{B8E83D3C-9466-4091-9AD1-1F89418A6EB7}><B8E83D3C.dll> []
<{202AEF39-2BFA-4A5F-B526-390FDE0BC675}><C:\Program Files\Internet Explorer\VitnNt64.987> []
<{E0D39066-96D7-4891-8527-488ADAFCD60F}><E0D39066.dll> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\CCenter.exe]
<IFEO[CCenter.exe]><svchost.exe> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RavMon.exe]
<IFEO[RavMon.exe]><svchost.exe> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RavMonD.exe]
<IFEO[RavMonD.exe]><svchost.exe> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RavStub.exe]
<IFEO[RavStub.exe]><svchost.exe> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RavTask.exe]
<IFEO[RavTask.exe]><svchost.exe> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RsAgent.exe]
<IFEO[RsAgent.exe]><svchost.exe> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RSTray.exe]
<IFEO[RSTray.exe]><svchost.exe> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Thunder5.exe]
<IFEO[Thunder5.exe]><svchost.exe> [(Verified)Microsoft Windows Publisher]
驱动程序
[Kisstusb / Kisstusb][Running/Manual Start]
<2 - 系统找不到指定的文件。
><N/A>
[HBKernel32 Driver / HBKernel32][Stopped/Boot Start]
<\SystemRoot\system32\drivers\HBKernel32.sys><N/A>
[aliimz / aliimz][Stopped/Manual Start]
<System32\Drivers\aliimz.sys><N/A>
[d435fd4 / d435fd4][Stopped/Manual Start]
<\??\C:\WINDOWS\system32\d435fd4.sys><N/A>
[f35ee9e / f35ee9e][Running/Manual Start]
<\??\C:\WINDOWS\system32\f35ee9e.sys><N/A>
[b160485 / b160485][Stopped/Manual Start]
<\??\C:\WINDOWS\system32\b160485.sys><N/A>
进程
[C:\Program Files\WinRAR\rarext.dll] [N/A, ]
[C:\WINDOWS\system32\HBJTLQ.dll] [N/A, ]
[C:\WINDOWS\system32\HBASKTAO.dll] [N/A, ]
[C:\WINDOWS\system32\HBWOW.dll] [N/A, ]
[C:\WINDOWS\system32\HBTL.dll] [N/A, ]
[C:\WINDOWS\system32\cmgot.dll] [N/A, ]
[C:\WINDOWS\system32\sys05030.dll] [N/A, ]
[C:\WINDOWS\system32\16AF66EB.dll] [N/A, ]
[C:\WINDOWS\system32\AD794E6B.dll] [N/A, ]
[C:\WINDOWS\system32\D7C79813.dll] [N/A, ]
[C:\WINDOWS\system32\201476D0.dll] [N/A, ]
[C:\WINDOWS\system32\58FF3024.dll] [N/A, ]
[C:\WINDOWS\system32\08223B03.dll] [N/A, ]
[C:\WINDOWS\system32\E1D19FCC.dll] [N/A, ]
[C:\WINDOWS\system32\DA63E650.dll] [N/A, ]
[C:\WINDOWS\system32\4FBFD5A4.dll] [N/A, ]
[C:\WINDOWS\system32\A1A6BC2E.dll] [N/A, ]
[C:\WINDOWS\system32\DFEC5CB7.dll] [N/A, ]
[C:\WINDOWS\system32\C8EB51BC.dll] [N/A, ]
[C:\WINDOWS\system32\2EF0D734.dll] [N/A, ]
[C:\WINDOWS\system32\B8E83D3C.dll] [N/A, ]
[C:\Program Files\Internet Explorer\VitnNt64.987] [N/A, ]
[C:\WINDOWS\system32\3B8DA919.dll] [N/A, ]
[C:\WINDOWS\system32\122B901E.dll] [N/A, ]
[C:\WINDOWS\system32\9CA963CA.dll] [N/A, ]
[C:\WINDOWS\system32\8566F82E.dll] [N/A, ]
[C:\WINDOWS\system32\E4814792.dll] [N/A, ]
[C:\WINDOWS\system32\BA7EDF54.dll] [N/A, ]
[C:\WINDOWS\system32\34A25F04.dll] [N/A, ]
[C:\WINDOWS\system32\B3721C07.dll] [N/A, ]
[C:\WINDOWS\system32\E0D39066.dll] [N/A, ]
浏览器加载项
[]
{202AEF39-2BFA-4A5F-B526-390FDE0BC675} <C:\Program Files\Internet Explorer\VitnNt64.987, N/A>
[]
{202AEF39-2BFA-4A5F-B526-390FDE0BC675} <C:\Program Files\Internet Explorer\VitnNt64.987, N/A>
服务
[RaySat_3dsmax8 Server / mi-raysat_3dsmax8][Running/Auto Start]
<"C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe"><N/A>
这个我不认识
HOSTS 文件 重置.
