2006-10-18,15:08:39

System Repair Engineer 2.2.6.605
Smallfrogs (http://www.KZTechs.com)

Windows 2000 Professional Service Pack 4 (Build 2195)
- 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<msnmsgr><"C:\Program Files\MSN Messenger\msnmsgr.exe" /background> [Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><C:\PROGRA~1\svhost32.exe> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<OfficeScanNT 监控程序><"C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe" -HideWindow> [Trend Micro Inc.]
<Synchronization Manager><mobsync.exe /logon> [(Verified)Microsoft Corporation]
<Tray><C:\WINNT\command\rundll32.exe> [N/A]
<wl><C:\WINNT\Download\svhost32.exe> [N/A]
<wdfmgr32><C:\WINNT\system32\wdfmgr32.exe> [N/A]
<CdnCtr><C:\Program Files\CNNIC\Cdn\cdnup.exe> [N/A]
<Update><C:\Program Files\Common Files\updat\Update.exe> [N/A]
<run><C:\WINNT\system32\rundll32.exe hnzh.dll a> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Corporation]
<Userinit><C:\WINNT\system32\userinit.exe,> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{08315C1A-9BA9-4B7C-A432-26885F78DF28}><C:\Program Files\Common Files\Microsoft Shared\MSINFO\SysInfo.wmp> [N/A]
<{6E44887F-5214-41F2-AB46-4728735C4CC6}><C:\Program Files\Internet Explorer\PLUGINS\systemy.sys> [N/A]
<{99F1D023-7CEB-4586-80F7-BB1A98DB7602}><C:\Program Files\Internet Explorer\IEXPLORE.Sys> [N/A]
<{FEB94F5A-69F3-4645-8C2B-9E71D270AF2E}><C:\Program Files\Internet Explorer\IEXPLORE.Dat> [N/A]
<{E568441B-9EF3-49F8-9A67-4141AC41ADD4}><C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll> [N/A]
<{9A0CFC58-5A6F-41ba-9FFE-4320F4F62FB1}><C:\WINNT\system32\cnscheck100.dll> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
<PostBootReminder><> [N/A]
[HKEY_CURRENT_USER\Control Panel\Desktop]
<SCRNSAVE.EXE><C:\WINNT\system32\极至性~1.SCR> [Acme Photo Software]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<Alitalk><; C:\PROGRA~1\阿里巴巴\贸易通\AliTalk.EXE -hideframe> [N/A]
<assistse><; "C:\PROGRA~1\3721\assistse.exe"> [N/A]
<BCUpdate><; C:\WINNT\system32\BCUP.exe> [N/A]
<CdnCtr><; C:\Program Files\CNNIC\Cdn\cdnup.exe> [N/A]
<CertificateRegistration><; SafeSignCertReg.exe> [A.E.T. Europe B.V.]
<cnsmin><; Rundll32.exe C:\WINNT\DOWNLO~1\CnsMin.dll,Rundll32> [N/A]
<DAEMON Tools><; "D:\虚拟光驱\DAEMON Tools\daemon.exe" -lang 1033> [(Verified)DT Soft Ltd.]
<Desktop><; C:\WINNT\system32\rundll32.exe "C:\Program Files\DeskAdTop\Run.dll" ,Rundll> [N/A]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<eMuleAutoStart><; E:\电驴\eMule\eMule.exe -AutoStart> [http://www.emule.org.cn]
<H/PC Connection Agent><; "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<helper.dll><; C:\WINNT\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32> [N/A]
<HotKeysCmds><; C:\WINNT\system32\hkcmd.exe> [(Verified)Intel Corporation]
<IgfxTray><; C:\WINNT\system32\igfxtray.exe> [(Verified)Intel Corporation]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<Internat.exe><; internat.exe> [(Verified)Microsoft Corporation]
<Kugoo><; C:\PROGRA~1\KuGoo2\kugoo.exe> []
<KuGoo3><; "C:\PROGRA~1\KuGoo2\kugoo.exe"> []
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
<Load><; ?> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<LogitechGalleryRepair><; C:\Program Files\Logitech\Video\ISStart.exe> [Logitech Inc.]
<LogitechVideoTray><; C:\Program Files\Logitech\Video\LogiTray.exe> [Logitech Inc.]
<mdac_runonce><; C:\WINDOWS\SYSTEM\runonce.exe> [N/A]
<MoveSearch><; C:\Program Files\wsearch\Search.exe> [N/A]
<mscfs><; > [N/A]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<MsnMsgr><; "C:\Program Files\MSN Messenger\msnmsgr.exe" /background> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<NTdhcp><; C:\WINNT\system32\NTdhcp.exe> [N/A]
<OfficeScanNT 监控程序><; "C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe" -HideWindow> [Trend Micro Inc.]
<QuickTime Task><; "E:\qutitime\qttask.exe" -atboottime> [Apple Computer, Inc.]
<res><; C:\WINNT\system32\res.exe> [N/A]
<rundll><; rundll32 rlrc.dll s> [N/A]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<Skype><; "E:\视频软件\文件目录\Phone\Skype.exe" /nosplash /minimized> [(Verified)N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<spoolsv><; C:\WINNT\system32\spoolsv\spoolsv.exe -printer> [N/A]
<Synchronization Manager><; mobsync.exe /logon> [(Verified)Microsoft Corporation]
<TkBellExe><; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [N/A]
<Torjan Program><; C:\WINNT\WINLOGON.EXE> [N/A]
<Update><; C:\Program Files\Common Files\UPDAT\Update.exe> [N/A]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<ws_ds><; C:\WINNT\sws32.exe> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<xiaotv><; C:\Program Files\TV\网络电视小精灵.exe> [N/A]
<yassistse><; "C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe"> [N/A]
<YLive.exe><; C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe> [N/A]

==================================
启动文件夹
N/A

==================================
服务
[Logical Disk Manager Administrative Service / dmadmin]
<C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.>
[InstallDriver Table Manager / IDriverT]
<"C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe"><Macrovision Corporation>
[OfficeScanNT RealTime Scan / ntrtscan]
<"C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe"><Trend Micro Inc.>
[OfficeScanNT Personal Firewall / OfcPfwSvc]
<"C:\Program Files\Trend Micro\OfficeScan Client\OfcPfwSvc.exe"><Trend Micro Inc.>
[Smart Card Helper / SCardDrv]
<C:\WINNT\system32\scardsvr32.exe -v><N/A>
[Remote Registry Protect / Scripts]
<C:\WINNT\System32\svchost.exe -k netsvcs-->C:\WINNT\system32\spted.dll><Microsoft Corporation>
[OfficeScanNT 侦听程序 / tmlisten]
<"C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe"><Trend Micro Inc.>
[WMDM PMSP Service / WMDM PMSP Service]
<C:\WINNT\system32\mspmspsv.exe><Microsoft Corporation>
[Portable Media Serial Number Service / WmdmPmSN]
<C:\WINNT\System32\svchost.exe -k netsvcs-->C:\WINNT\system32\mspmsnsv.dll><Microsoft Corporation>

==================================
驱动程序
[aeaudio / aeaudio]
<system32\drivers\aeaudio.sys><Andrea Electronics Corporation>
[Broadcom 440x 10/100 Integrated Controller Driver / bcm4sbe5]
<System32\DRIVERS\bcm4sbe5.sys><Broadcom Corporation>
[cdnprot / cdnprot]
<\SystemRoot\system32\drivers\cdnprot.sys><中国互联网络信息中心(CNNIC)>
[cdntran / cdntran]
<system32\drivers\cdntran.sys><CNNIC>
[Cdr4_2K / Cdr4_2K]
<C:\WINNT\SYSTEM32\DRIVERS\Cdr4_2K.SYS><Roxio>
[Cdralw2k / Cdralw2k]
<C:\WINNT\SYSTEM32\DRIVERS\Cdralw2k.SYS><Roxio>
[dmboot / dmboot]
<System32\drivers\dmboot.sys><VERITAS Software Corp.>
[Logical Disk Manager Driver / dmio]
<\SystemRoot\System32\drivers\dmio.sys><VERITAS Software Corp.>
[dmload / dmload]
<\SystemRoot\System32\drivers\dmload.sys><VERITAS Software Corp.>
[dtscsi / dtscsi]
<\SystemRoot\System32\Drivers\dtscsi.sys><N/A>
[D-Link DFE-530TX PCI Fast Ethernet Adapter Driver Service / FETNDISB]
<system32\DRIVERS\dlkfet5b.sys><D-Link>
[ialm / ialm]
<System32\DRIVERS\ialmnt5.sys><Intel Corporation>
[kmsinput / kmsinput]
<\??\C:\WINNT\system32\drivers\kmsinput.sys><N/A>
[Netgroup Packet Filter / NPF]
<system32\DRIVERS\npf.sys><CACE Technologies>
[npkcrypt / npkcrypt]
<\??\D:\QQ文件\npkcrypt.sys><N/A>
[Ntfs / Ntfs]
<C:\WINNT\SYSTEM32\DRIVERS\Ntfs.SYS><Microsoft Corporation>
[nwlnksipx / nwlnksipx]
<\??\C:\WINNT\system32\drivers\nwlnksipx.sys><Microsoft Corporation>
[OMCI / OMCI]
<\SystemRoot\SYSTEM32\DRIVERS\OMCI.SYS><Dell Computer Corporation>
[Logitech QuickCam Pro 3000(PID_08B1) / PhilCam8116_2K]
<system32\DRIVERS\CamDrL20.sys><Logitech Inc.>
[PNP15323 / PNP15323]
<system32\Drivers\pnp15323.sys><Anti Driver>
[Direct Parallel Link Driver / Ptilink]
<System32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Sense3 / Sense3]
<System32\Drivers\sense3.sys><Beijing Senselock>
[smwdm / smwdm]
<system32\drivers\smwdm.sys><Analog Devices, Inc.>
[Sony Memory Stick Driver(SONYPVM1) / SONYPVM1]
<\SystemRoot\system32\DRIVERS\SONYPVM1.SYS><Sony Corporation>
[Sony USB Filter Driver (SONYPVU1) / SONYPVU1]
<system32\DRIVERS\SONYPVU1.SYS><Sony Corporation>
[sptd / sptd]
<\SystemRoot\System32\Drivers\sptd.sys><N/A>
[Superk53 / Superk53]
<\SystemRoot\System32\drivers\superk53.sys><Microsoft Corporation>
[Trend Micro Filter / TmFilter]
<\??\C:\Program Files\Trend Micro\OfficeScan Client\TmFilter.sys><Trend Micro Inc.>
[Trend Micro VSAPI NT / VSApiNt]
<\??\C:\Program Files\Trend Micro\OfficeScan Client\VSApiNt.sys><Trend Micro Inc.>

==================================
浏览器加载项
[]
{A9930D97-9CF0-42A0-A10D-4F28836579D5} <C:\PROGRA~1\KuGoo2\KUGOO3~1.OCX, N/A>
[conimehlp Class]
{B10343BD-1DC6-442F-9BA2-D44C708CEE83} <C:\WINNT\system32\mskey32.dll, Microsoft>
[信息检索]
{CE7C3CF0-98A8-474D-B2B5-1ED7E2E3B004} <C:\WINNT\system32\IEHelper.dll, N/A>
[]
{1D901067-2529-4A9B-9B6B-7A1DB3A44CB5} <C:\Program Files\coolsign\coolsign.dll, Fengcent>
[WisImage Class]
{012F24D4-6A26-11D3-AA0F-0000E8212478} <C:\WINNT\DOWNLO~1\wisimage.dll, WIS Technologies, Inc.>
[IEDown Class]
{D0A29C6C-AA71-4423-8C4A-5998B774C448} <C:\WINNT\system32\GLIEDown2.dll, N/A>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINNT\system32\Macromed\Flash\Flash8.ocx, Macromedia, Inc.>
[AcPreview 控件]
{F281A59C-7B65-11D3-8617-0010830243BD} <C:\WINDOWS\DOWNLO~1\ACPREV~1.OCX, N/A>
[访问通用网址]
<C:\Program Files\CNNIC\Cdn\cnnic.htm, N/A>

==================================
正在运行的进程
[PID: 200][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.00.2195.6601]
[PID: 224][\??\C:\WINNT\system32\csrss.exe] [Microsoft Corporation, 5.00.2195.6601]
[PID: 244][\??\C:\WINNT\system32\winlogon.exe] [Microsoft Corporation, 5.00.2195.6970]
[C:\WINNT\system32\cnscheck100.dll] [N/A, N/A]
[PID: 276][C:\WINNT\system32\services.exe] [Microsoft Corporation, 5.00.2195.6700]
[C:\WINNT\system32\dmserver.dll] [VERITAS Software Corp., 2195.6605.297.3]
[C:\WINNT\system32\cdnns.dll] [CNNIC, 2, 0, 0, 0]
[PID: 288][C:\WINNT\system32\lsass.exe] [Microsoft Corporation, 5.00.2195.6902]
[PID: 424][C:\WINNT\System32\SCardSvr.exe] [Microsoft Corporation, 5.00.2195.6609]
[PID: 488][C:\WINNT\system32\svchost.exe] [Microsoft Corporation, 5.00.2134.1]
[C:\WINNT\system32\cdnns.dll] [CNNIC, 2, 0, 0, 0]
[PID: 524][C:\WINNT\system32\spoolsv.exe] [Microsoft Corporation, 5.00.2195.7059]
[C:\WINNT\system32\E_SL2070.DLL] [SEIKO EPSON CORPORATION, 2, 8, 0, 0]
[C:\WINNT\system32\cdnns.dll] [CNNIC, 2, 0, 0, 0]
[PID: 596][C:\WINNT\System32\svchost.exe] [Microsoft Corporation, 5.00.2134.1]
[C:\WINNT\system32\cdnns.dll] [CNNIC, 2, 0, 0, 0]
[PID: 724][C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe] [Trend Micro Inc., 7.3.0.1028]
[C:\Program Files\Trend Micro\OfficeScan Client\OfcDog.dll] [Trend Micro Inc., 7.3.0.1028]
[C:\Program Files\Trend Micro\OfficeScan Client\OfcPlugInAPI.dll] [Trend Micro Inc., 7.3.0.1028]
[C:\Program Files\Trend Micro\OfficeScan Client\TimeString.dll] [N/A, N/A]
[C:\Program Files\Trend Micro\OfficeScan Client\OfcPIPC.dll] [N/A, N/A]
[C:\Program Files\Trend Micro\OfficeScan Client\OfcPlugInMain.dll] [Trend Micro Inc., 7.3.0.1028]
[C:\Program Files\Trend Micro\OfficeScan Client\OfcPlugInTray.dll] [Trend Micro Inc., 7.3.0.1028]
[C:\Program Files\Trend Micro\OfficeScan Client\tmdbg20.dll] [trend_company_name, 1, 0, 0, 1]
[PID: 756][C:\WINNT\system32\MSTask.exe] [Microsoft Corporation, 4.71.2195.6920]
[C:\WINNT\system32\cdnns.dll] [CNNIC, 2, 0, 0, 0]
[C:\WINNT\system32\cnscheck100.dll] [N/A, N/A]
[PID: 808][C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe] [Trend Micro Inc., 7.3.0.1028]
[C:\Program Files\Trend Micro\OfficeScan Client\TMSOCK.dll] [Trend Micro Inc., 7.3.0.1028]
[C:\Program Files\Trend Micro\OfficeScan Client\loadhttp.dll] [Trend Micro Inc., 7.3.0.1028]
[C:\Program Files\Trend Micro\OfficeScan Client\OfcPlugInAPI.dll] [Trend Micro Inc., 7.3.0.1028]
[C:\Program Files\Trend Micro\OfficeScan Client\OfcPIPC.dll] [N/A, N/A]
[C:\Program Files\Trend Micro\OfficeScan Client\libTmCAV.dll] [Trend Micro Inc., 7.3.0.1028]
[C:\Program Files\Trend Micro\OfficeScan Client\Pwd.dll] [Trend Micro Inc., 7.3.0.1028]
[C:\Program Files\Trend Micro\OfficeScan Client\OfcDog.dll] [Trend Micro Inc., 7.3.0.1028]
[C:\WINNT\system32\cdnns.dll] [CNNIC, 2, 0, 0, 0]
[C:\Program Files\Trend Micro\OfficeScan Client\tmdbg20.dll] [trend_company_name, 1, 0, 0, 1]
[C:\Program Files\Trend Micro\OfficeScan Client\OfcPlugInMain.dll] [Trend Micro Inc., 7.3.0.1028]
[C:\Program Files\Trend Micro\OfficeScan Client\OfcPlugInTray.dll] [Trend Micro Inc., 7.3.0.1028]
[C:\Program Files\Trend Micro\OfficeScan Client\TmUpdate.dll] [Trend Micro Inc., 2,63,0,1007]
[PID: 872][C:\WINNT\System32\WBEM\WinMgmt.exe] [Microsoft Corporation, 1.50.1085.0100]
[PID: 884][C:\WINNT\system32\mspmspsv.exe] [Microsoft Corporation, 7.10.00.3059]
[PID: 896][C:\WINNT\system32\svchost.exe] [Microsoft Corporation, 5.00.2134.1]
[PID: 924][C:\Program Files\Trend Micro\OfficeScan Client\OfcPfwSvc.exe] [Trend Micro Inc., 7.3.0.1028]
[C:\Program Files\Trend Micro\OfficeScan Client\OfcPfwCommon.dll] [N/A, N/A]
[C:\Program Files\Trend Micro\OfficeScan Client\ZLib.dll] [Trend Micro Inc., 1.31.0.1708]
[C:\Program Files\Trend Micro\OfficeScan Client\OfcPIPC.dll] [N/A, N/A]
[C:\Program Files\Trend Micro\OfficeScan Client\tmdbg20.dll] [trend_company_name, 1, 0, 0, 1]
[C:\Program Files\Trend Micro\OfficeScan Client\tmCfwApi.dll] [Trend Micro Inc., 1.2.0.1020]
[C:\WINNT\system32\cdnns.dll] [CNNIC, 2, 0, 0, 0]
[PID: 1140][C:\WINNT\TEMP\MKC5B4.EXE] [N/A, N/A]
[C:\WINNT\system32\cnscheck100.dll] [N/A, N/A]
[PID: 472][C:\WINNT\system32\conime.exe] [Microsoft Corporation, 5.00.2195.6655]
[C:\WINNT\system32\hnzh.dll] [N/A, N/A]
[C:\WINNT\system32\cnscheck100.dll] [N/A, N/A]
[C:\Program Files\Common Files\Microsoft Shared\MSINFO\SysInfo.wmp] [N/A, N/A]
[PID: 1120][C:\Program Files\CNNIC\Cdn\cdnup.exe] [, 2, 4, 0, 10]
[C:\Program Files\CNNIC\Cdn\cdndet.dll] [CNNIC, 2, 4, 0, 3]
[C:\Program Files\CNNIC\Cdn\cdnforie.dll] [CNNIC, 2, 0, 0, 6]
[C:\Program Files\CNNIC\Cdn\imaoe.dll] [CNNIC, 2, 2, 0, 1]
[C:\Program Files\CNNIC\Cdn\cdntdns.dll] [CNNIC, 2, 2, 0, 3]
[C:\WINNT\system32\hnzh.dll] [N/A, N/A]
[C:\WINNT\system32\cnscheck100.dll] [N/A, N/A]
[C:\Program Files\Common Files\Microsoft Shared\MSINFO\SysInfo.wmp] [N/A, N/A]
[C:\WINNT\system32\cdnns.dll] [CNNIC, 2, 0, 0, 0]
[PID: 1392][C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe] [Trend Micro Inc., 7.3.0.1028]
[C:\Program Files\Trend Micro\OfficeScan Client\loadhttp.dll] [Trend Micro Inc., 7.3.0.1028]
[C:\Program Files\Trend Micro\OfficeScan Client\Pwd.dll] [Trend Micro Inc., 7.3.0.1028]
[C:\Program Files\Trend Micro\OfficeScan Client\OfcPlugInAPI.dll] [Trend Micro Inc., 7.3.0.1028]
[C:\Program Files\Trend Micro\OfficeScan Client\OfcPIPC.dll] [N/A, N/A]
[C:\Program Files\Trend Micro\OfficeScan Client\TimeString.dll] [N/A, N/A]
[C:\Program Files\Trend Micro\OfficeScan Client\ntmonres.dll] [Trend Micro Inc., 7.3.0.1028]
[C:\Program Files\Trend Micro\OfficeScan Client\OfcPlugInMain.dll] [Trend Micro Inc., 7.3.0.1028]
[C:\Program Files\Trend Micro\OfficeScan Client\OfcPlugInTray.dll] [Trend Micro Inc., 7.3.0.1028]
[C:\Program Files\Trend Micro\OfficeScan Client\tmdbg20.dll] [trend_company_name, 1, 0, 0, 1]
[C:\Program Files\CNNIC\Cdn\imaoe.dll] [CNNIC, 2, 2, 0, 1]
[C:\Program Files\CNNIC\Cdn\cdnforie.dll] [CNNIC, 2, 0, 0, 6]
[C:\Program Files\CNNIC\Cdn\cdndet.dll] [CNNIC, 2, 4, 0, 3]
[C:\WINNT\system32\hnzh.dll] [N/A, N/A]
[C:\WINNT\system32\cdnns.dll] [CNNIC, 2, 0, 0, 0]
[C:\WINNT\system32\cnscheck100.dll] [N/A, N/A]
[C:\Program Files\Common Files\Microsoft Shared\MSINFO\SysInfo.wmp] [N/A, N/A]
[PID: 1440][C:\Program Files\Common Files\updat\Update.exe] [N/A, N/A]
[C:\Program Files\CNNIC\Cdn\imaoe.dll] [CNNIC, 2, 2, 0, 1]
[C:\Program Files\CNNIC\Cdn\cdnforie.dll] [CNNIC, 2, 0, 0, 6]
[C:\Program Files\CNNIC\Cdn\cdndet.dll] [CNNIC, 2, 4, 0, 3]
[C:\WINNT\system32\hnzh.dll] [N/A, N/A]
[C:\WINNT\system32\cnscheck100.dll] [N/A, N/A]
[C:\Program Files\Common Files\Microsoft Shared\MSINFO\SysInfo.wmp] [N/A, N/A]
[C:\WINNT\system32\cdnns.dll] [CNNIC, 2, 0, 0, 0]
[PID: 1396][C:\Program Files\MSN Messenger\msnmsgr.exe] [Microsoft Corporation, 7.0.0816]
[C:\Program Files\CNNIC\Cdn\imaoe.dll] [CNNIC, 2, 2, 0, 1]
[C:\Program Files\CNNIC\Cdn\cdnforie.dll] [CNNIC, 2, 0, 0, 6]
[C:\Program Files\CNNIC\Cdn\cdndet.dll] [CNNIC, 2, 4, 0, 3]
[C:\WINNT\system32\hnzh.dll] [N/A, N/A]
[C:\WINNT\system32\cdnns.dll] [CNNIC, 2, 0, 0, 0]
[C:\WINNT\system32\msdmo.dll] [N/A, N/A]
[C:\Program Files\Common Files\Microsoft Shared\MSINFO\SysInfo.wmp] [N/A, N/A]
[C:\WINNT\system32\cnscheck100.dll] [N/A, N/A]
[PID: 1460][C:\WINNT\explorer.exe] [Microsoft Corporation, 5.00.3700.6690]
[C:\Program Files\CNNIC\Cdn\imaoe.dll] [CNNIC, 2, 2, 0, 1]
[C:\Program Files\CNNIC\Cdn\cdnforie.dll] [CNNIC, 2, 0, 0, 6]

[C:\Program Files\CNNIC\Cdn\cdndet.dll] [CNNIC, 2, 4, 0, 3]
[C:\WINNT\system32\hnzh.dll] [N/A, N/A]
[C:\Program Files\Common Files\Microsoft Shared\MSINFO\SysInfo.wmp] [N/A, N/A]
[C:\WINNT\system32\cnscheck100.dll] [N/A, N/A]
[C:\WINNT\system32\cdnns.dll] [CNNIC, 2, 0, 0, 0]
[C:\WINNT\system32\mskey32.dll] [Microsoft, 1, 0, 0, 1]
[C:\WINNT\system32\IEHelper.dll] [N/A, 1, 0, 0, 1]
[C:\WINNT\system32\msdmo.dll] [N/A, N/A]
[C:\PROGRA~1\KuGoo2\KUGOO3~1.OCX] [N/A, N/A]
[D:\播放软件\压缩软件\rarext.dll] [N/A, N/A]
[d:\PROGRA~1\3721\ske\contmenu.dll] [N/A, N/A]
[C:\Program Files\JetAudio\JetFlExt.dll] [JetAudio, Inc., 6, 0, 0, 5124]
[C:\WINNT\system32\igfxpph.dll] [Intel Corporation, 3,0,0,2104]
[C:\WINNT\system32\hccutils.DLL] [Intel Corporation, 3,0,0,2104]
[PID: 1672][C:\Program Files\同花顺日信\LiveUpdate.exe] [上海核新软件技术有限公司, 2005, 12, 3, 0]
[C:\Program Files\CNNIC\Cdn\imaoe.dll] [CNNIC, 2, 2, 0, 1]
[C:\Program Files\CNNIC\Cdn\cdnforie.dll] [CNNIC, 2, 0, 0, 6]
[C:\Program Files\CNNIC\Cdn\cdndet.dll] [CNNIC, 2, 4, 0, 3]
[C:\Program Files\Common Files\Microsoft Shared\MSINFO\SysInfo.wmp] [N/A, N/A]
[C:\WINNT\system32\hnzh.dll] [N/A, N/A]
[C:\WINNT\system32\cnscheck100.dll] [N/A, N/A]
[C:\WINNT\system32\cdnns.dll] [CNNIC, 2, 0, 0, 0]
[PID: 1756][c:\windows\system\taskmrg.exe] [, 1.0.0.0]
[C:\WINNT\system32\cdnns.dll] [CNNIC, 2, 0, 0, 0]
[C:\WINNT\system32\cnscheck100.dll] [N/A, N/A]
[PID: 1712][C:\Program Files\Internet Explorer\IEXPLORE.EXE] [Microsoft Corporation, 6.00.2600.0000]
[C:\Program Files\CNNIC\Cdn\imaoe.dll] [CNNIC, 2, 2, 0, 1]
[C:\Program Files\CNNIC\Cdn\cdnforie.dll] [CNNIC, 2, 0, 0, 6]
[C:\Program Files\CNNIC\Cdn\cdndet.dll] [CNNIC, 2, 4, 0, 3]
[C:\Program Files\Common Files\Microsoft Shared\MSINFO\SysInfo.wmp] [N/A, N/A]
[C:\WINNT\system32\hnzh.dll] [N/A, N/A]
[C:\PROGRA~1\KuGoo2\KUGOO3~1.OCX] [N/A, N/A]
[C:\WINNT\system32\mskey32.dll] [Microsoft, 1, 0, 0, 1]
[C:\WINNT\system32\IEHelper.dll] [N/A, 1, 0, 0, 1]
[C:\WINNT\system32\cnscheck100.dll] [N/A, N/A]
[C:\WINNT\system32\cdnns.dll] [CNNIC, 2, 0, 0, 0]
[C:\WINNT\system32\PNCRT.dll] [Real Networks, Inc, 6.0.0.0]
[C:\Program Files\Common Files\Real\Common\pnrs3260.dll] [RealNetworks, Inc., 6.0.9.4068]
[C:\WINNT\system32\Macromed\Flash\Flash8.ocx] [Macromedia, Inc., 8,0,22,0]
[PID: 1988][E:\Windows 2000 SP4 简体中文版\sreng2\SREng\SREng.exe] [Smallfrogs Studio, 2.2.6.605]
[C:\Program Files\CNNIC\Cdn\imaoe.dll] [CNNIC, 2, 2, 0, 1]
[C:\Program Files\CNNIC\Cdn\cdnforie.dll] [CNNIC, 2, 0, 0, 6]
[C:\Program Files\CNNIC\Cdn\cdndet.dll] [CNNIC, 2, 4, 0, 3]
[C:\Program Files\Common Files\Microsoft Shared\MSINFO\SysInfo.wmp] [N/A, N/A]
[C:\WINNT\system32\hnzh.dll] [N/A, N/A]
[C:\WINNT\system32\cnscheck100.dll] [N/A, N/A]
[C:\WINNT\system32\cdnns.dll] [CNNIC, 2, 0, 0, 0]

==================================
文件关联
.TXT Error. [C:\WINNT\NOTEPAD.EXE "%1" ]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM Error. [hh.exe %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI Error. [notepad.exe %1]
.INF Error. [notepad.exe %1]
.VBS Error. [wscript.exe "%1" %*]
.JS Error. [C:\WINNT\system32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
[D:\]
[autorun]
OPEN=D:\pagefile.pif

==================================
HOSTS 文件
125.91.1.20 localhost
125.91.1.20 www.7322.com
125.91.1.20 www.5566.net
125.91.1.20 www.v111.com
125.91.1.20 www.gjj.cc
125.91.1.20 www.hao123.com
125.91.1.20 hao123.com
125.91.1.20 www.9991.com
125.91.1.20 9991.com
125.91.1.20 www.gjj.cc
61.162.230.31 www.7939.com
61.162.230.31 7939.com
61.162.230.31 59.34.148.98
61.162.230.31 about:blank
61.141.31.11 down.Virussky.com
61.141.31.11 60.191.60.108
61.141.31.11 219.153.20.209
61.141.31.11 forum.ikaka.com
61.141.31.11 bbs.360safe.com
61.141.31.11 www.360safe.com
61.141.31.11 www.piaoxue.com
61.141.31.11 61.129.58.12
61.141.31.11 forum.jiangmin.com
61.141.31.11 luosoft.com
125.91.1.20 post.baidu.com
61.141.31.11 60.191.60.107
61.141.31.11 219.139.58.97
61.141.31.11 59.34.148.81
125.91.1.20 60.191.60.114
125.91.1.20 www.ycdy.com
61.141.31.11 cn.zs.yahoo.com
61.141.31.11 www.znmq.com
61.141.31.11 www.btbbt.com
61.141.31.11 bbs.btbbt.com
125.91.1.20 auto.search.msn.com
125.91.1.20 www.pcav.cn
125.91.1.20 www.cnhx.com.cn
125.91.1.20 btbaicai.com
125.91.1.20 www.btbaicai.com
125.91.1.20 219.239.102.77
61.141.31.11 hz.mop-hz.com
61.141.31.11 www.jacai.com
61.141.31.11 www.gao58.com
61.141.31.11 www.ok538.com
61.141.31.11 www.3000sss.com
61.141.31.11 www.qq658.com
61.141.31.11 www.53679.com
61.141.31.11 www.17587.net

==================================