HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components
+ Internet ExplorerWindows NT User Data Migration ToolMicrosoft Corporationc:\windows\system32\shmgrate.exe
+ Internet Explorer 6IE 5.0 Per-User Install UtilityMicrosoft Corporationc:\windows\system32\ie4uinit.exe
+ Microsoft Outlook Express 6Outlook Express Setup LibraryMicrosoft Corporationc:\program files\outlook express\setup50.exe
+ Microsoft Windows Media PlayerMicrosoft Windows Media Player 安装实用程序Microsoft Corporationc:\windows\inf\unregmp2.exe
+ Microsoft Windows Media PlayerADVPACKMicrosoft Corporationc:\windows\system32\advpack.dll
+ NetMeeting 3.01ADVPACKMicrosoft Corporationc:\windows\system32\advpack.dll
+ Outlook ExpressWindows NT User Data Migration ToolMicrosoft Corporationc:\windows\system32\shmgrate.exe
+ Themes SetupMicrosoft(C) Register ServerMicrosoft Corporationc:\windows\system32\regsvr32.exe
+ Windows Messenger 4.7ADVPACKMicrosoft Corporationc:\windows\system32\advpack.dll
+ Windows 桌面更新Microsoft(C) Register ServerMicrosoft Corporationc:\windows\system32\regsvr32.exe
+ 通讯簿 6Outlook Express Setup LibraryMicrosoft Corporationc:\program files\outlook express\setup50.exe
+ 浏览器自定义组件Microsoft Internet Explorer Customization DLLMicrosoft Corporationc:\windows\system32\iedkcs32.dll
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
+ Browseui 预加载程序Shell Browser UI LibraryMicrosoft Corporationc:\windows\system32\browseui.dll
+ 组件类别缓存程序Shell Browser UI LibraryMicrosoft Corporationc:\windows\system32\browseui.dll
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellService
ObjectDelayLoad
+ CDBurnWindows Shell Common DllMicrosoft Corporationc:\windows\system32\shell32.dll
+ PostBootReminderWindows Shell Common DllMicrosoft Corporationc:\windows\system32\shell32.dll
+ SysTraySystray shell service
objectMicrosoft Corporationc:\windows\system32\st
object.dll
+ WebCheckWeb Site MonitorMicrosoft Corporationc:\windows\system32\webcheck.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
+ shell32.dllWindows Shell Common DllMicrosoft Corporationc:\windows\system32\shell32.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
+ ActiveX 高速缓存文件夹
Object Control ViewerMicrosoft Corporationc:\windows\system32\occache.dll
+ Channel MenuChannel Definition File ViewerMicrosoft Corporationc:\windows\system32\cdfview.dll
+ Channel PropertiesChannel Definition File ViewerMicrosoft Corporationc:\windows\system32\cdfview.dll
+ Code Download AgentWeb Site MonitorMicrosoft Corporationc:\windows\system32\webcheck.dll
+ ConnectionAgentWeb Site MonitorMicrosoft Corporationc:\windows\system32\webcheck.dll
+ Crypto PKO ExtensionCrypto Shell ExtensionsMicrosoft Corporationc:\windows\system32\cryptext.dll
+ Crypto Sign ExtensionCrypto Shell ExtensionsMicrosoft Corporationc:\windows\system32\cryptext.dll
+ FTP Folders WebviewMicrosoft Internet Explorer FTP Folder Shell ExtensionMicrosoft Corporationc:\windows\system32\msieftp.dll
+ PostAgentWeb Site MonitorMicrosoft Corporationc:\windows\system32\webcheck.dll
+ Sendmail serviceSend MailMicrosoft Corporationc:\windows\system32\sendmail.dll
+ Sendmail serviceSend MailMicrosoft Corporationc:\windows\system32\sendmail.dll
+ Shell Search BandShell Browser UI LibraryMicrosoft Corporationc:\windows\system32\browseui.dll
+ Subscription MgrWeb Site MonitorMicrosoft Corporationc:\windows\system32\webcheck.dll
+ TrayAgentWeb Site MonitorMicrosoft Corporationc:\windows\system32\webcheck.dll
+ WebCheckWeb Site MonitorMicrosoft Corporationc:\windows\system32\webcheck.dll
+ WebCheck SyncMgr HandlerWeb Site MonitorMicrosoft Corporationc:\windows\system32\webcheck.dll
+ WebCheckChannelAgentWeb Site MonitorMicrosoft Corporationc:\windows\system32\webcheck.dll
+ WebCheckWebCrawlerWeb Site MonitorMicrosoft Corporationc:\windows\system32\webcheck.dll
+ Web反病毒保护Script Monitor Internet Explorer pluginKaspersky Labc:\program files\kaspersky lab\kaspersky anti-virus 6.0\scieplugin.dll
+ Windows Media Player Add to Playlist Context Menu HandlerWindows Media Player LauncherMicrosoft Corporationc:\windows\system32\wmpshell.dll
+ Windows Media Player Burn Audio CD Context Menu HandlerWindows Media Player LauncherMicrosoft Corporationc:\windows\system32\wmpshell.dll
+ Windows Media Player Play as Playlist Context Menu HandlerWindows Media Player LauncherMicrosoft Corporationc:\windows\system32\wmpshell.dll
+ 频道句柄对象Channel Definition File ViewerMicrosoft Corporationc:\windows\system32\cdfview.dll
+ 频道快捷方式Channel Definition File ViewerMicrosoft Corporationc:\windows\system32\cdfview.dll
+ 频道文件Channel Definition File ViewerMicrosoft Corporationc:\windows\system32\cdfview.dll
+ 预订文件夹Web Site MonitorMicrosoft Corporationc:\windows\system32\webcheck.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
Objects
+ NavigatMon Class360安全卫士实时保护模块f:\360safe\safemon\safemon.dll
+ Thunder Browser HelperXunLeiBHOThunder Networking Technologies,LTDc:\program files\thunder network\thunder\comdlls\xunleibho_001.dll
HKLM\Software\Microsoft\Internet Explorer\Extensions
+ 腾讯QQQQTENCENTd:\tencent\qq.exe
安排日程
+ DDD_Install_Program.job文件未找到: C:\DOCUME~1\user\LOCALS~1\Temp\00daf375-c656-48eb-8f3f-f4c554de094d\DUDU_CHILUN.exe
HKLM\System\CurrentControlSet\Services
+ AudioSrvWindows Audio ServiceMicrosoft Corporationc:\windows\system32\audiosrv.dll
+ AVPKaspersky Anti-VirusKaspersky Labc:\program files\kaspersky lab\kaspersky anti-virus 6.0\avp.exe
+ BrowserComputer Browser Service DLLMicrosoft Corporationc:\windows\system32\browser.dll
+ C-DillaCdaC11BAMacrovision RTS ServiceMacrovisionc:\windows\system32\drivers\cdac11ba.exe
+ CryptSvcCryptographic ServicesMicrosoft Corporationc:\windows\system32\cryptsvc.dll
+ DcomLaunchDistributed COM ServicesMicrosoft Corporationc:\windows\system32\rpcss.dll
+ DhcpDHCP Client ServiceMicrosoft Corporationc:\windows\system32\dhcpcsvc.dll
+ dmserverLogical Disk Manager service dllMicrosoft Corp.c:\windows\system32\dmserver.dll
+ DnscacheDNS Caching Resolver ServiceMicrosoft Corporationc:\windows\system32\dnsrslvr.dll
+ ERSvcWindows Error Reporting ServiceMicrosoft Corporationc:\windows\system32\ersvc.dll
+ EventlogServices and Controller appMicrosoft Corporationc:\windows\system32\services.exe
+ helpsvcMicrosoft PCHealth Service HolderMicrosoft Corporationc:\windows\pchealth\helpctr\binaries\pchsvc.dll
+ lanmanserverServer Service DLLMicrosoft Corporationc:\windows\system32\srvsvc.dll
+ lanmanworkstationWorkstation Service DLLMicrosoft Corporationc:\windows\system32\wkssvc.dll
+ LmHostsTCPIP NetBios Transport Services DLLMicrosoft Corporationc:\windows\system32\lmhsvc.dll
+ PlugPlayServices and Controller appMicrosoft Corporationc:\windows\system32\services.exe
+ PolicyAgentLSA Shell (Export Version)Microsoft Corporationc:\windows\system32\lsass.exe
+ ProtectedStorageLSA Shell (Export Version)Microsoft Corporationc:\windows\system32\lsass.exe
+ RemoteRegistryRemote Registry ServiceMicrosoft Corporationc:\windows\system32\regsvc.dll
+ RfwServiceRising Personal FireWall ServiceBeijing Rising Technology Co., Ltd.c:\program files\rising\rfw\rfwsrv.exe
+ RpcSsDistributed COM ServicesMicrosoft Corporationc:\windows\system32\rpcss.dll
+ SamSsLSA Shell (Export Version)Microsoft Corporationc:\windows\system32\lsass.exe
+ ScheduleTask Scheduler EngineMicrosoft Corporationc:\windows\system32\schedsvc.dll
+ seclogonSecondary Logon Service DLLMicrosoft Corporationc:\windows\system32\seclogon.dll
+ SENSSystem Event Notification Service (SENS)Microsoft Corporationc:\windows\system32\sens.dll
+ SharedAccessMicrosoft NAT Helper ComponentsMicrosoft Corporationc:\windows\system32\ipnathlp.dll
+ ShellHWDetectionWindows Shell Services DllMicrosoft Corporationc:\windows\system32\shsvcs.dll
+ SpoolerSpooler SubSystem AppMicrosoft Corporationc:\windows\system32\spoolsv.exe
+ srserviceSystem Restore ServiceMicrosoft Corporationc:\windows\system32\srsvc.dll
+ ThemesWindows Shell Services DllMicrosoft Corporationc:\windows\system32\shsvcs.dll
+ TrkWksDistributed Link Tracking ClientMicrosoft Corporationc:\windows\system32\trkwks.dll
+ W32TimeWindows Time ServiceMicrosoft Corporationc:\windows\system32\w32time.dll
+ WebClientWeb DAV Service DLLMicrosoft Corporationc:\windows\system32\webclnt.dll
+ winmgmtWMIMicrosoft Corporationc:\windows\system32\wbem\wmisvc.dll
+ wscsvcWindows Security Center ServiceMicrosoft Corporationc:\windows\system32\wscsvc.dll
+ wuauservWindows Update AutoUpdate ServiceMicrosoft Corporationc:\windows\system32\wuauserv.dll
+ WZCSVCWireless Zero Configuration ServiceMicrosoft Corporationc:\windows\system32\wzcsvc.dll
HKLM\System\CurrentControlSet\Services
+ ac97intcIntel(r) Integrated Controller Hub Audio DriverIntel Corporationc:\windows\system32\drivers\ac97intc.sys
+ ACPIACPI Driver for NTMicrosoft Corporationc:\windows\system32\drivers\acpi.sys
+ aeaudioAndrea Audio Stub DriverAndrea Electronics Corporationc:\windows\system32\drivers\aeaudio.sys
+ aecMicrosoft Acoustic Echo CancellerMicrosoft Corporationc:\windows\system32\drivers\aec.sys
+ AFDAncillary Function Driver for WinSockMicrosoft Corporationc:\windows\system32\drivers\afd.sys
+ agp440440 NT AGP FilterMicrosoft Corporationc:\windows\system32\drivers\agp440.sys
+ aijbdehg文件未找到: system32\drivers\aijbdehg.sys
+ AliIde文件未找到: System32\DRIVERS\aliide.sys
+ AmdK7Processor Device DriverMicrosoft Corporationc:\windows\system32\drivers\amdk7.sys